How the connection actually works
Most integration vendors describe this in a sentence. It is the part your IT reviewer will ask about first, so here it is in full.
Connection method. Cloud systems connect through the vendor's own API. Systems that cannot be reached from outside your network use a connector deployed locally, inside your perimeter.
Network requirements. The local connector opens an outbound tunnel. No inbound firewall rules, no open ports, and nothing leaves your network until you have reviewed and approved what the flow reads.
Access level. Read-only by default, scoped to the specific tables a flow actually needs. Writes go only to destinations you have explicitly approved, and a generated definition needs a person's approval before it runs on a schedule.
What we do not claim yet. We are not SOC 2 or ISO 27001 certified, we do not offer self-hosting, and we do not promise real-time behaviour. Refresh cadence is configured per integration. We would rather you find that out here than in a security review.