Odaseva website screenshot

Odaseva

Odaseva is an enterprise data security, backup, and governance platform purpose-built for large, complex Salesforce environments. It provides data backup and recovery, archiving, seeding and anonymization/masking, encryption and key management, privacy and data-residency controls, and data governance for regulated enterprises. Odaseva holds SOC 2 Type II, ISO 27001:2022, HITRUST, HIPAA, GDPR, CCPA, TISAX, IRAP, MLPS 2.0, and CSA STAR Level 2, with independent audits by Ernst & Young. Surfaced as a portfolio company of Partech and added to the API Evangelist network. Odaseva runs as a Salesforce-hosted application (api.odaseva.com and platform.odaseva.com are Salesforce My Domain hosts) and does have a versioned Odaseva Platform API, but it is customer-gated: every unauthenticated request returns a Salesforce login challenge and there is no public developer portal, OpenAPI, or reference. The one publicly installable client is the first-party Odaseva CLI on npm, last released 2022-12-09; no server-side SDK is published on any registry. Odaseva runs an Atlassian Statuspage at trust.odaseva.com.

Odaseva is profiled on the APIs.io network. Tagged areas include Company, Infrastructure Saas, Salesforce, Data Protection, and Backup.

Odaseva’s developer surface includes engineering blog, support, CLI, and 18 more developer resources.

24.3/100 emerging ▬ flat Agent 6/100 human only Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
0 APIs
CompanyInfrastructure SaasSalesforceData ProtectionBackupData GovernanceSecurityCompliancePrivacy

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 24.3/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 2.9 / 20
Access Clarity 8.7 / 20
Operational Transparency 3.8 / 13
Contract Governance 2.2 / 12
Discoverability 6.9 / 10
Agent readiness — 6/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 3 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/odaseva: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Pricing Plans 1

Published pricing tiers and plan structures.

Odaseva Plans Pricing

0 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Odaseva Rate Limits

0 limits

RATE LIMITS

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Odaseva Authentication

oauth2/password-login · 2 schemes

SECURITY

Odaseva Domain Security

TLSv1.3 · DNSSEC · DMARC

SECURITY

Odaseva Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Odaseva Trust Center

SOC 2 Type II, ISO 27001:2022, HITRUST, HIPAA, GDPR, CCPA, Privacy Shield, TISAX, IRAP, MLPS 2.0, CSA STAR Level 2

SECURITY

Resources

Get Started 1

Portal, sign-up, and the first successful call

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

Build 3

SDKs, sample code, and the tooling you integrate with

Access & Security 7

Authentication, authorization, and security posture

Scroll for all 7

Operate 2

Status, limits, changes, and where to get help

Commercial 2

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: odaseva
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/odaseva.png
name: Odaseva
description: 'Odaseva is an enterprise data security, backup, and governance platform purpose-built for large, complex Salesforce
  environments. It provides data backup and recovery, archiving, seeding and anonymization/masking, encryption and key management,
  privacy and data-residency controls, and data governance for regulated enterprises. Odaseva holds SOC 2 Type II, ISO 27001:2022,
  HITRUST, HIPAA, GDPR, CCPA, TISAX, IRAP, MLPS 2.0, and CSA STAR Level 2, with independent audits by Ernst & Young. Surfaced
  as a portfolio company of Partech and added to the API Evangelist network. Odaseva runs as a Salesforce-hosted application
  (api.odaseva.com and platform.odaseva.com are Salesforce My Domain hosts) and does have a versioned Odaseva Platform API,
  but it is customer-gated: every unauthenticated request returns a Salesforce login challenge and there is no public developer
  portal, OpenAPI, or reference. The one publicly installable client is the first-party Odaseva CLI on npm, last released
  2022-12-09; no server-side SDK is published on any registry. Odaseva runs an Atlassian Statuspage at trust.odaseva.com.'
url: https://raw.githubusercontent.com/api-evangelist/odaseva/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- partech
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.23'
created: '2026-07-17'
modified: '2026-08-17'
tags:
- Company
- Infrastructure Saas
- Salesforce
- Data Protection
- Backup
- Data Governance
- Security
- Compliance
- Privacy
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: TrustCenter
  url: security/odaseva-trust-center.yml
- type: Website
  url: https://www.odaseva.com/
- type: TrustCenter
  url: https://www.odaseva.com/security-trust
- type: Compliance
  url: https://www.odaseva.com/security-trust
- type: Security
  url: https://www.odaseva.com/responsibility-disclosure/
- type: VulnerabilityDisclosure
  url: security/odaseva-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/odaseva-domain-security.yml
- type: SecurityTxt
  url: well-known/odaseva-security.txt
- type: WellKnown
  url: well-known/odaseva-well-known.yml
- type: Blog
  url: https://www.odaseva.com/blog/
- type: Support
  url: https://www.odaseva.com/contact-us/
- type: PrivacyPolicy
  url: https://www.odaseva.com/assets/pdf/Odaseva-Privacy-Policy.pdf
- type: TermsOfService
  url: https://www.odaseva.com/assets/pdf/Odaseva-TermsofUse.pdf
- type: StatusPage
  url: https://trust.odaseva.com/
- type: Lifecycle
  url: lifecycle/odaseva-lifecycle.yml
- type: CLI
  url: cli/odaseva-cli.yml
- type: Packages
  url: packages/odaseva-packages.yml
- type: Conformance
  url: conformance/odaseva-conformance.yml
- type: LLMsTxt
  url: llms/odaseva-llms.txt
- type: GitHubOrganization
  url: https://github.com/odaseva
- type: Login
  url: https://platform.odaseva.com/CBR
x-enrichment:
  date: '2026-08-17'
  status: enriched
  artifacts_added: 10
  pass: local-v1
x-coverage:
  state: gated
  reason: customer-only-docs
  detail: Odaseva ships a real, versioned Platform API — the first-party odaseva-cli binary is a REST client for it and exposes
    an --apiVersion selector — but every path on its host api.odaseva.com answers a Salesforce My Domain 401 login challenge,
    and the reference that would describe it lives only in the customer knowledge base behind platform.odaseva.com/CBR; there
    is no developer subdomain at all (docs., developer., api-docs. and ten other candidates are NXDOMAIN) and the 376-URL
    sitemap contains no API, developer or documentation URL.
  evidence:
  - url: https://api.odaseva.com/openapi.json
    status: 401
  - url: https://api.odaseva.com/v1/openapi.json
    status: 401
  - url: https://www.odaseva.com/developers
    status: 404
  - url: https://www.odaseva.com/.well-known/agent-card.json
    status: 404
  - url: https://api.odaseva.com/mcp
    status: 404
  checked: '2026-08-17'