Security of DESelect Search in SFMC

the deselect search is a free application that makes it possible to https //deselect com/search/ deselect search comes in 2 versions https //chrome google com/webstore/detail/deselect search in salesf/ekppadhnhmemajkdbkohalhoncnfhmbm an installed package available on the https //appexchange salesforce com/ note the chrome extension does not work on its own and requires first installing the deselect search appexchange installed package salesforce is currently experiencing https //help salesforce com/s/issue?id=a028c00000x9tb0 with downloading any app from the appexchange you can download deselect search following the instructions below use this temporary link https //mc s50 exacttarget com/cloud/login html#app/administration/installedpackages/28655f1f 8918 481f 80da c1223ed859e9/install replace the number 50 in the link above with the number you see in your sfmc login link (the stack number), you can see the highlighted part that needs to be replaced in the screenshot below install search with the above modified link check out https //help salesforce com/s/articleview?id=000383566\&type=1 to find the stack location for a marketing cloud account deselect search for chrome google chrome permissions upon installing the chrome extension, you may notice that deselect search requires permission to ' read and change site data ' the reason these permissions are needed 1\) reading site data it needs to read the url of your browser to detect if you're logged in to sfmc the chrome extension is not reading any content from the page, and this permission is only for reading the html of the site you're visiting (so sfmc it is not a permission to modify any actual data in your sfmc 2\) changing site data the chrome extension is fully integrated with the sfmc ui to be able to show the search field in the menu bar in sfmc, we need to modify the html of the page marketing cloud permissions the deselect search in sfmc salesforce marketing cloud uses your current salesforce marketing cloud session to perform searches using the salesforce marketing cloud api using the session token means that the chrome extension can only work if you are currently logged in to salesforce marketing cloud it also means the users' visibility is respected, one can never find things through deselect search the user would not be able to see otherwise data processing the chrome extension is an add on of the deselect search appexchange installed package and allows you to search from any page in sfmc note deselect search chrome extension does not store the access tokens, nor the search results it just passes the search query through the installed package and returns the name and location of the results our servers run in secure data centers with digitalocean with soc ii and iso 27001 certifications deselect is iso 27001 certified as well the chrome extension doesn't look at any content for example when you search for a data extension, deselect search in sfmc salesforce marketing cloud only returns the name and location of the data extension, it does not look at the data in a data extension the chrome extension follows both the https //developer chrome com/docs/webstore/program policies/# text=at%20a%20minimum%2c%20extensions%20should,from%20the%20chrome%20web%20store and the https //deselect com/privacy policy/ , which amongst others entails no data being sold or transferred to third parties, and no data is sold or transferred for purposes unrelated to this app's purpose deselect search for appexchange a detailed explanation of the security of the deselect search for appexchange can be found on the deselect search security fact sheet which can be found at https //deselect com/security and data protection/ questions if you have any questions regarding the security of our applications, please email https //security\@deselect com and we'll be happy to provide clarification!