Skip to content
  1. Home
  2. Product
  3. Security
Security & trust

Built to pass your security review.

Territory plans hold your whole go-to-market: every account, owner and quota. BoogieBoard keeps them behind your identity provider, shows each person exactly the branch they own, and records every change.

Visit the trust center
SOC 2 compliant SAML 2.0 SSO SCIM 2.0 MFA
Key capabilities

The controls IT asks about

SOC 2 compliantBoogieBoard is SOC 2 compliant. Our security documentation and policies are in our trust center.
Trust center
SAML single sign-onAny SAML 2.0 identity provider: Okta, Azure AD, Ping and more.
SCIM provisioningCreate, update and remove users and groups from your identity provider.
Multi-factor authenticationAuthenticator-app MFA with recovery codes.
Workspace rolesAdministrator, Member, Collaborator Plus and Collaborator.
Branch-scoped accessCollaborators see and work on only the branch of the territory tree they own.
Full audit trailActivity streams, assignment history, sync logs and push reports.
Sharing

Share the plan without sharing the keys

Executives and reps often need to see the plan, not edit it. Send a read-only, interactive map or a filtered account view by link, and see who opened it — no extra seats, no exported spreadsheets drifting around your inbox.
  • Read-only links for people without a login
  • An access log on every shared view
  • Leaders invited as collaborators see only their branch
Audit trail

Every change has a name and a timestamp

Changes land in the activity stream and in each account's assignment history, so when someone asks who changed an owner, the answer takes seconds. Accounts can also be restored to an earlier date.
  • Activity stream on every territory node
  • Assignment history for every account
  • Sync logs and push reports for every Salesforce run
Salesforce

Your CRM stays under your control

The connection uses OAuth with PKCE and token rotation, so BoogieBoard never stores your Salesforce password. Only committed plans can push, and a preflight shows every write before it happens.
  • One-time connected-app setup by your Salesforce admin
  • Simulate a push for a single account before running it
  • Schedule pushes, and pause them any time
AI assistants

AI that follows your rules

Assistants connect with the same permissions as the person who connected them. Locks still hold, every action is recorded, and nothing reaches Salesforce without a committed plan and a preflight.
  • OAuth sign-in with your BoogieBoard account, or a personal API key
  • Connected assistants listed with your API keys, with last-used time
FAQ

Security questions

Is BoogieBoard SOC 2 compliant?

Yes. BoogieBoard is SOC 2 compliant. Visit our trust center for our security documentation and policies.

Do you support single sign-on?

Yes. BoogieBoard supports SAML 2.0 with any identity provider, plus Okta, Google and Salesforce sign-in. Users and groups can be provisioned with SCIM 2.0.

Can a regional leader see only their own territories?

Yes. Collaborators are scoped to a branch of the territory tree, so a leader reviews and comments on their region without seeing the rest of the plan.

Does BoogieBoard store our Salesforce password?

No. After a one-time connected-app setup, the connection uses OAuth with PKCE and token rotation.

Can we see who changed an assignment?

Yes. The activity stream and each account's assignment history show who made a change and when, and accounts can be restored to an earlier date.

Keep exploring

IntegrationsSalesforce, APIs, MCP and SSO Territory managementLocks, history and restore Platform overviewHow it all fits together

See your own territories balanced — on the first call.

Bring a CSV or connect Salesforce. We'll build a balanced plan from your real accounts while you watch.

See pricing