- Deployment
- hosted
- Hq Country
- United States
- Hq City
- San Francisco
- Ownership
- public
- Founded
- 1999
- Training Default
- never
- Residency Options
- United States, France, Germany, Italy, Sweden, Switzerland, United Kingdom, Australia, Brazil, Canada, India, Indonesia, Japan, South Korea, Singapore
- Gov Access Exposure
- us-cloud-act
- Eu Ai Act Role
- deployer
- Certs
- ISO 42001, ISO 27001, ISO 27017, ISO 27018, ISO 27701, SOC 2 Type II, SOC 3, PCI DSS, HITRUST, FedRAMP
- DPA available
- yes
- Zero Retention Available
- Yes
- Retention Default
- Agentforce itself stores no Customer Data; Salesforce defers the retention and deletion window to the underlying Service's Security, Privacy and Architecture (SPARC) documentation. Zero data retention is contractually in force at every third-party LLM provider.
- Retention Exceptions
- Data masking is currently disabled for Agentforce — the Einstein Trust Layer's PII/PCI masking, which Salesforce markets as a core control, is switched off for agents to improve performance and accuracy. Batch processing via Azure OpenAI uses global endpoints where geo-aware routing rules are not supported.
- Subprocessors
- OpenAI, L.L.C., Microsoft Corporation (Azure OpenAI), Amazon Web Services, Inc. (Bedrock), Google LLC (Vertex AI)
- Subprocessor Count
- 4
- Transfer Mechanism
- sccs+dpf
- Eu Procurement Ready
- conditional
- Eu Procurement Reason
- Salesforce is the only row in this category that lets a European customer make inference fail rather than leave the region: 'Enable In-Region Model Requests Only' entirely disables region fallback for Anthropic and GPT models, and a separate toggle disables the final fallback to the United States. EU orgs route to EU Azure OpenAI endpoints and eu.anthropic.* Bedrock inference profiles. But the default is the opposite — out-of-region re-routing on failure, ending in the US — the hard lock requires Data 360 to be provisioned, and Salesforce's own sovereign SKU (Hyperforce EU Operating Zone) excludes select Einstein features rather than including them.
- Training Claim Basis
- stated
- Training Confidence
- high
- Residency Claim Basis
- stated
- Residency Confidence
- high
- Retention Claim Basis
- stated
- Retention Confidence
- high
- Subprocessors Claim Basis
- stated
- Subprocessors Confidence
- high
- Residency Class
- eu-selectable
- Portability / Exit Path
- proprietary-only
- Subprocessor Jurisdiction
- non-eu
- Underlying model providers
- OpenAI, Anthropic, Google, Microsoft, Salesforce
