The DESelect Search is an application that makes it possible to easily search for all kinds of objects in Salesforce Marketing Cloud. DESelect Search comes in 2 versions: as a free Chrome Extension, and as an Installed Package available on the Salesforce AppExchange.

DESelect Search for Chrome

Google Chrome permissions

Upon installing the Chrome extension, you may notice that DESelect Search requires permission to 'read and change site data'.

The reason these permissions are needed:

1) Reading site data: It needs to read the URL of your browser to detect if you're logged in to SFMC.

Note the Chrome Extension is not reading any content from the page. We'd also like to clarify that this permission only relates to the HTML of the site you're visiting (so SFMC), it is not a permission to modify any actual data in your SFMC.

2) Changing site data: The Chrome Extension is fully integrated with the SFMC UI. To be able to show the search field in the menu bar in SFMC, we need to modify the HTML of the page.

Marketing Cloud permissions

The DESelect Search in SFMC - Salesforce Marketing Cloud uses your current Salesforce Marketing Cloud session to perform searches using the Salesforce Marketing Cloud API.

Using the session token means that the Chrome extension can only work if you are currently logged in to Salesforce Marketing Cloud.

It also means the users' visibility is respected, one can never find things through DESelect Search the user would not be able to see otherwise.

Data Processing

The Chrome extension sends this session token together with your search request to our servers, where we build the request to Salesforce Marketing Cloud, and return the results, which are then shown in the Chrome extension. Note DESelect Search does not store the access tokens, nor the search results. It just passes the search query through the SFMC API and returns the name and location of the results.
Our servers run in secure data centers with DigitalOcean with SOC II and ISO-27001 certifications.  DESelect is ISO-27001 certified as well.

The extension doesn't look at any content. For example: when you search for a data extension, DESelect Search in SFMC - Salesforce Marketing Cloud only returns the name and location of the data extension, it does not look at the data in a data extension.

This extension follows both the Chrome Developer Program Policies and the DESelect Privacy Policy, which amongst other entails no data is sold or transferred to third parties, and no data is sold or transferred for purposes unrelated to this apps purpose.

In case you are concerned about the use of the user session token, we recommend using DESelect Search for AppExchange instead, which comes with an Installed Package with a clearly defined scope.

DESelect Search for AppExchange

A detailed explanation of the security of the DESelect Search for AppExchange can be found on the DESelect Search Security Fact Sheet which can be found at https://deselect.com/security-and-data-protection/.

Questions

If you have any questions regarding the security of our applications, please email security@deselect.com and we'll be happy to provide clarification!