VendorApp Admin

Envoy is a customer experience company. We design, build, and run support operations on Zendesk for businesses whose support does not stop at their direct customer. EnvoyEngage is the platform we build on, and VendorApp is the first app on it.

What VendorApp does

In a B2B2B or B2B2C business, the people who need support are not only your customers. They are your customers' vendors, partners, and the customers those partners serve. VendorApp gives each of those parties an isolated, branded support portal that runs on the Zendesk you already operate, so tickets, organizations, and users stay in Zendesk and there is no second system of record.

This app puts the VendorApp admin console inside Zendesk Support. Open it from the nav bar, sign in with your Zendesk account, and run the whole thing without leaving the agent interface.

What it does well

• The full admin, inside Zendesk. A full-page nav bar app that loads the entire VendorApp admin in Support: portals, organizations, users, branding, and the Zendesk connection in one place.

• Sign in with Zendesk. No second login to manage. Each agent is verified against Zendesk over OAuth, and only agents who are active admins of the matching VendorApp workspace can open the app. Everyone else sees a no-access message.

• Branded portals for every party. Per-portal name, color, and logo, plus custom domains such as support.theirvendor.com with automatic SSL.

• Two-sided by design. Each organization is classified as a buyer-side or supplier-side party, and every ticket is shared by exactly the two organizations on it. No third party ever sees it.

• Isolation enforced in the database. Row-level security scopes every query to the right workspace and organization, not just the interface.

• Native to your Zendesk. Tickets, organizations, and users are synced from the Zendesk account you already run, so your agents keep working where they already work.

Data handling and privacy

• What this app reads. When an agent signs in, the app uses Zendesk OAuth with read-only scope to read that agent's own user record (GET /api/v2/users/me.json): id, name, email, role, and active status. It is used for one purpose, to confirm the agent is an active admin of the connected VendorApp workspace, and for nothing else.

• What the platform processes. To run the branded portals, EnvoyEngage syncs organizations, end users, and tickets from the connected Zendesk account, and stores workspace configuration, portal branding, and user records. We process this data solely to provide the service, as a processor on the customer's behalf under our Data Processing Agreement.

• How it is protected. Traffic is served over HTTPS/TLS. The per-tenant Zendesk sign-in details and OAuth grants we hold are stored in an encrypted vault and are never exposed to the browser. Every workspace's data is isolated by database row-level security, and access to the embedded admin is limited to verified, active workspace admins.

• What we do not do. We do not sell personal data, and we do not use customer data for advertising or profiling.

• Read the detail. Privacy Policy: https://app.envoyengage.com/legal/privacy — Security and Trust: https://app.envoyengage.com/legal/security — Sub-processors: https://app.envoyengage.com/legal/subprocessors — Data Processing Agreement: https://app.envoyengage.com/legal/dpa — Questions: jakub@goenvoy.co