How it works
The connection is established through a secure, one-time authorization process using Salesforce's standard OAuth 2.0 protocol. Setup involves these key steps:
- Create an Integration User: You will need to create a dedicated integration user in Salesforce for Kernel.
- Authorize Access: Using this user, you will authorize Kernel's "Connected App." This provides Kernel with a secure token to access Salesforce. Access can be revoked at any time by simply deactivating the integration user.
Depending on your configuration, Kernel either (a) provides a flat file that specifies new custom fields you will need to create in your Salesforce Account object, or (b) an unlocked package your Salesforce admin can easily inspect and install. Kernel will only write data into these specific fields, ensuring your master data is not altered.

Data permissions
To perform its analysis, Kernel requires read access to data in several standard objects. Write access is limited only to the custom fields created for Kernel.

API Usage and Efficiency
Kernel is designed to be efficient with your Salesforce API quota. We use the Bulk API to update records in large batches, which significantly reduces the number of API calls required.
When writing data, Kernel uses the Bulk API (link) to minimize API quota consumption by updating up to 500 records at a time. For an organization with 100,000 accounts, this typically equates to only 200 API calls.