Salesforce + Data Alias: Read the fields you pick from your Salesforce org into review
Why use Salesforce with Data Alias
Report exports from Salesforce carry account and contact details in most columns. This reads just the fields you need into review, without an export step.
How it works
You sign in to production or a sandbox. Salesforce returns your org's API address with the token, and Data Alias checks that it is a genuine Salesforce address before sending anything there. You pick an object and the fields to read; the query is built only from field names Salesforce itself listed. Records go from your org straight to your browser — which needs one setting from your Salesforce admin: allowing this site under Setup → Security → CORS. Without it the import doesn't work, and there is no server fallback, because a fallback would route your records through Data Alias.
What it does
- Read only the fields you pick from an object
- Refuse too many columns before running a query
- Detect a result over your row limit instead of cutting it off silently
- Sign in without asking for a refresh token
How it will connect
These are the steps once the connection is available. Until then: Export a report from Salesforce as a CSV and upload the file to Data Alias.
- 1
Ask your admin to allow this site
Under Setup → Security → CORS in Salesforce. Data Alias tells you this before you sign in.
- 2
Sign in
Choose production or sandbox.
- 3
Pick an object and its fields
Fields you don't pick are never part of the query.
- 4
Review in your browser
Detection, your rules and the review before export run in the tab, the same as for an uploaded file. Change any suggestion you disagree with.
What moves where
- What reaches Data Alias servers
- The one-time sign-in code and whether it is production or sandbox. No record.
- What Data Alias reads
- The fields you picked from one object.
- Never sent
- The original file, the alias mapping, and restored results with real names never leave your browser.
- Who holds the access token
- Your browser tab, in memory only. No refresh token is requested.
Limits worth knowing
- Every organisation's Salesforce admin has to allow this site under CORS before the import can work.
- The api permission Salesforce grants is broader than what Data Alias does with it, which is describing objects and running one query.
Can I connect Salesforce today?
No. The connection is built and tested against stand-ins for Salesforce, but it hasn't been run against a real Salesforce account, so there is nothing to connect yet. Export a report from Salesforce as a CSV and upload the file to Data Alias.
Why does my admin need to change a setting?
Salesforce only answers browser requests from sites an admin has allowed. Data Alias won't work around that with a server, because that would send your records through it.
Could a crafted field name change the query?
No. The query uses only names that match a strict identifier pattern and that Salesforce itself listed. Anything else is refused, not escaped.
Data Alias reduces exposure risk but cannot guarantee detection of every sensitive value. Every transfer passes the same review as a download — check the result before you send it. How connected services are handled.