Pardot API Access Notes

Securely connect your Pardot account to FeedOtter to enable email automation features.

Introduction

Security is important to us at FeedOtter. We’ve worked closely with Pardot’s API team to ensure we have access to as little of your data as possible. Here you can read-up on what Pardot data FeedOtter has access to.

API Access

FeedOtter is integrated with the latest Salesforce / Pardot SSO login and api authentication. You have full-control over the FO integration at all times.

API Methods Used

Besides those used for authentication, FeedOtter for Pardot utilizes 3 separate REST API methods.

lists, a read-only call to provide the user with a UI for selecting the Pardot list(s) emails should be sent to. The call returns only list names, and numerical id numbers. No contact information is available. For more information read Pardot's API guide: http://developer.pardot.com/kb/api-version-4/lists/

campaigns, a read-only call to provide a UI for selecting the Pardot Campaign used for reporting on email sends. The call returns campaign names and numerical id numbers. No contact information is available. For more information read Pardot's API guide: http://developer.pardot.com/kb/api-version-4/campaigns/

emails.send, a write call that passes list and campaign ids along with HTML content to your Pardot account for the purpose of creating a new email. This call includes a date/time which denotes when the email will be sent by Pardot. No contact information is exchanged other than the TO, FROM, REPLY-TO text provided by your team as part of the email creation process in FeedOtter. For more information refer to Pardot's API documentation: http://developer.pardot.com/kb/api-version-4/

FeedOtter Encryption

All pertinent user and account data is encrypted using AES256. This includes passwords, email addresses, api tokens, keys, and associated data.

FeedOtter's user/login password scheme uses PBKDF2.

There is no use of MD5 or Sha hashing.

Prospects and Personal Information

FeedOtter NEVER accesses your leads, email addresses, employees, or company information. As described in the previous section we perform read-only queries to provide UI elements and a single write operation to create a new scheduled email asset.