Most portal tools work by making a copy: they sync your CRM into their own database, then serve screens from that copy. It feels reasonable until you ask two questions. How fresh is the copy? And who else is now holding my data?
Basicloud answers both by refusing to copy at all. When a portal user opens a page, the query is proxied live to your connected system — Salesforce today — and the answer comes straight back. Your system of record stays the only record.
What that buys you
- Always real-time. There is no batch job to wait for and no stale export floating around. What the portal shows is what your system says, right now.
- No second copy to protect. A synced copy is a second attack surface with its own backups, retention, and breach risk. A proxy holds nothing.
- Revocation means revocation. Disconnect the OAuth grant and access ends — there is no lingering dataset on our side to worry about.
How access stays safe
The connection is a standard OAuth 2.0 grant — no packages installed in your org, no credentials shared with us. Tokens are encrypted at rest and never exposed to the browser, and every query passes row-level access control layered on top of your system’s own permissions before it runs.
The result is a portal that behaves like a window, not a warehouse. Your data doesn’t move; the right slice of it just becomes visible to the right people.