Back to Newsroom
Product News

Regionalization: Where Your Data is Stored Matters

March 18, 2019

Regulations and requirements vary drastically between organizations. What works for a large enterprise in California won’t work for a mid-size company from Chicago. Regionalization is one way Sales Engagement platforms help Sales Organizations take data security to the next level.

Compliance is often driven by the regional regulations that govern data privacy. Data sovereignty and General Data Protection Regulation (GDPR) requirements will often impose restrictions that can only be successfully addressed through some flavor of a multi-region strategy.
– Tod Golding, Partner Solutions Architect at AWS

Regionalization in this context means the segmentation of hosted tenants based on region and/or usage. This not only allows for customization (for example, keeping data that originates from the European Union in the EU) but also improves security and platform performance.

This can all get very technical very fast. The important thing to remember is regionalization secures your data based on regional regulations while improving platform performance.

Why Regionalize?

Sales Engagement platforms are typically cloud-based SaaS solutions. These platforms are ‘multi-tenant’, meaning that one database serves multiple customers that are ‘partitioned’ from each other via a security model in the application, as opposed to separate virtual servers.

Advantages of SaaS:

  • Financially attractive.
  • You typically have no upfront costs to start using and can be implemented quickly.
  • Multi-tenant applications have a lower monthly cost to customers.
  • Faster innovation pace.
  • Ease of integration between multiple SaaS application (such as ERP & CRM).

Disadvantages of SaaS:

  • Platform speed. As platform providers increase their customer base, web interfaces can struggle with load times and may lack data richness. Example: When you view a prospect list and the system displays 20 records at a time, requiring a ‘next’ button to browse further.
  • Data ownership concerns. Some SaaS vendors have contracts that won’t allow customers to retrieve their own data until they are paid in full.
  • Organizational health concerns. New SaaS vendors appear every day and many are only operating due to Venture Capital or other equity money.

By implementing regionalization and selecting reliable SaaS vendors consumers can avoid many of the disadvantages listed above. This makes Multi-tenant SaaS solutions the most attractive option for many B2B buyers in the current market.

Regionalization improves overall platform performance by dividing the ‘load’ between server hosts. Reducing incident impact while improving fault tolerance and data resistance to ultimately improve platform scalability.

Solution providers, like Salesloft, use regionalization as a way to make certain that needs unique to the particular client are met and that one customer’s usage does not impede another’s.

Salesloft’s Regionalized Infrastructure

We take security seriously at Salesloft. Salesloft has obtained ISO 27001 certification for the information security management system to support the Salesloft Platform. We are GDPR and SOC 2 compliant, undergoing a SOC 2 Type 2 examination on an annual basis with a third party audit firm, Schellman & Company LLC.

“Not only are we security first but we also help companies build trust through authentic sales communications.”
– Kyle Porter, CEO of Salesloft

By utilizing different safety procedures like the world-class infrastructure that is Amazon Web Service (AWS) Salesloft continues to bring a safe and reliable platform for its customers.

Regionalization is one of many ways how Salesloft is working to take security to the next level.

How are we doing it?

Routing based on usage, region, and regulations. A global service layer works in conjunction with tenant-aware routing to keep data secure and in the country or region in which the tenant is located. This change will not impact the typical user experience.

We have your back

In addition to regionalization and security certifications, Salesloft is continually searching for more ways to improve reliability. If we see something, we’ll react quickly and remedy the issue.

Providing a good customer experience is paramount to success. Mitigate the risk of poor customer experiences with organizational safeguards. We enable your team to avoid mistakes before they happen and to remain focused on their goals.

Ever vigilant for potential system interruptions, we’ve invested heavily in Security Operations and System Security at Salesloft. We’re relentlessly updating our systems and practice to protect your data.

Our virtual systems are replaced on a regular basis with new, patched systems. System configuration and consistency are maintained using a combination of configuration management, up-to-date images, and continuous deployment.

Salesloft protects your data as it travels between you and our systems, as well as within our infrastructure. All network traffic runs over SSL/HTTPS, the most common and trusted communications protocol on the Internet.

Our internal infrastructure is isolated using strict firewalls and network access lists. Each system is designated to a firewall security group by its function. By default, all access is denied and only explicitly allowed ports are exposed. Persistence and storage layers are encrypted and secured behind VPN & VPC firewalls.

Only people who need access, get access. Production system access is limited to key members of the Salesloft engineering team and passwords are expressly forbidden. At a minimum, authentication requires two factors including asymmetric RSA public/private keys and a time-based crypto token.

Salesloft offices are protected behind network firewalls from well­ known security vendors and secured by keycard access. Our employee workstations and laptops are imaged and managed centrally according to published security policies. Collaborative tools like email, document shares, and calendars require two­factor authentication to mitigate phishing attacks.

You don’t have to take our word for it.

All of our security certifications and reports are important milestones for Salesloft as a company, but even more so for you. They signify our commitment as a service provider to implementing, designing and maintaining effective security controls and practices across our organization.

We don’t stop there. Even though we’ve designed secure systems and procedures, we regularly utilize expert third-party security vendors for additional security tests to identify and remediate potential vulnerabilities.

These periodic penetration tests help keep our applications safe and secure. These tests cover network, server, database and in-depth White Box testing for vulnerabilities inside Salesloft applications.

At Salesloft, we live and breathe sales for you – the sales professional – without sacrificing security and reliability. Whether it’s through regulation compliance, security-minded development, or thought leadership Salesloft looks to partner with our customers for mutual success.

Rely on Salesloft so you can concentrate on what’s important: closing deals, driving revenue, and hosting stellar buyer experiences.

To learn more about how Salesloft approaches all things security check out our Security page, our Support Site, or contact us at [email protected].