All Cloud Part® data is stored only in the SharePoint Site Collection they are installed in. Therefore, all Cloud Part® files, records, and configuration information is subject to the exact same stringent security protocols as the SharePoint environment they are installed in. With the exception of outgoing email from the Alert Plus Cloud Part® and read-only API’s such as Google Maps or Yahoo Weather, Cloud Parts® do not reference any libraries or resources that are not already contained within the SharePoint environment.
For outgoing email, Cloud Parts® leverage secure Bamboo Framework Azure functions and SendGrid email APIs to securely send alerts. All communication to and from those services is encrypted via SSL. Also, the credentials used by My Bamboo to install Cloud Parts® are kept securely in Azure using AES encryption.