Agentforce
salesforce.com
Automated, point-in-time. Not independently reviewed or approved by TRUSTYCYBER unless expressly stated.
- No formal subprocessor register disclosed
- A no-training commitment was found: confirm its scope in writing
- Retention terms found: confirm them in writing
See Before you sign, with what to ask for ↓
Scanned Nov 1, 2026 · Public evidence · Point-in-time
Higher scores indicate stronger, independently supported AI assurance, governance, AI systems, models, data, supply chain and third-party assurance evidence. The score and the decision are related but different: a well-scored vendor can still carry conditions.
Before you sign
Why it matters: The vendor names AI-related providers or partially addresses its supply chain, but the public sources scanned do not include a formal, dated subprocessor register.
What to ask for: Request a dated subprocessor register with change-notification terms for the DPA/order form.
Why it matters: The sources include a no-training statement ("Under the Salesforce Trust Layer's zero data retention policy, prompts and generated responses are not used to train the underlying third-party large language models and remain the customer's property. The commitment is platform-level and specific to the third-party LLMs; it does not address training of Salesforce's own models.") but do not settle the question for every model, plan and data type in scope.
What to ask for: Confirm in writing that the no-training commitment covers every model, plan and data type you will use, including any opt-in sharing or feedback.
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“Developing and optimizing the performance of our services We process your Personal Data to develop, optimize, and improve the performance of our services”
Why it matters: The sources describe retention ("The Salesforce Trust Layer applies a zero data retention policy under which prompts and generated responses are never stored by the underlying third-party large language models. The statement is made for the Trust Layer platform-wide; it does not name Agentforce and says nothing about retention of conversation logs on the Salesforce side.") but not a complete window for every data type.
What to ask for: Get retention periods in writing for inputs, outputs, logs and backups, including any provider that runs the model.
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
Australian Government checksdirections checked Nov 1, 2026
No vendor-specific PSPF direction names this vendor or product (checked 2026-11-01).
PROTECTED level. IRAP Assessment Report - Einstein Platform & Agentforce AU (infrastructure Hyperforce) dated 2025-06-27; IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU dated 2025-09-18 also lists Agentforce & Einstein Platform. Reports are password-protected and obtained via the Salesforce account team.
“Name IRAP Assessment Report - Einstein Platform & Agentforce AU [PROTECTED] Updated On 2025-06-27 Infrastructure Hyperforce Services Agentforce & Einstein Platform”
“Name IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU [PROTECTED] Updated On 2025-09-18 Infrastructure Hyperforce Services Agentforce & Einstein Platform Salesforce Services (Hyperforce)”
“IRAP assessments involve independent ACSC endorsed IRAP assessors evaluating the implementation, appropriateness and effectiveness of a system’s security controls. The IRAP assessment outcomes are documented within IRAP security assessment reports.”
“Please note some of the reports below require a password to be opened. Customers are requested to contact their Salesforce Account team to request for the password to access these reports.”
Not found in the sources this scan collected. If the service will hold government data, ask whether it is hosted with a provider certified under the Hosting Certification Framework, and at which level.
No Australian data residency commitment was found in the sources this scan collected. Ask where inputs, outputs, logs and backups are processed and stored, and whether processing can be kept in Australia.
What your organisation still has to do
Every level of government
- Treat AI outputs, including meeting transcripts and summaries, as public records: capture or dispose of them under your records authority (the Archives Act 1983 for Commonwealth agencies, your state's records legislation for state agencies and councils). Source ↗
Commonwealth agencies
- Assess foreign ownership, control or influence risk for this technology asset, as PSPF Direction 001-2024 requires. Source ↗
- Apply the DTA Policy for the responsible use of AI in government: record the use case, assess its impact before deployment, and keep your AI transparency statement current. Source ↗
- Assess the service against the ISM controls for the highest classification of data you intend to use with it (OFFICIAL, OFFICIAL: Sensitive or PROTECTED). Source ↗
State agencies and councils
- Assess the service under your state's privacy law, which governs where residents' personal information may go: for example the PPIP Act 1998 in New South Wales, the Privacy and Data Protection Act 2014 in Victoria or the Information Privacy Act 2009 in Queensland.
- New South Wales agencies: complete the NSW AI Assessment Framework self-assessment, which Circular DCS-2024-04 makes mandatory. Source ↗
- Victorian public sector: follow Administrative Guideline 2024/07 on the safe and responsible use of generative AI. Source ↗
Buyer questionsanswered only from the public evidence scanned, click a row for the answer
!Will they train on your data?Ask the vendor
Under the Salesforce Trust Layer's zero data retention policy, prompts and generated responses are not used to train the underlying third-party large language models and remain the customer's property. The commitment is platform-level and specific to the third-party LLMs; it does not address training of Salesforce's own models.
Requires written confirmation, see Before you sign ↓
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“Developing and optimizing the performance of our services We process your Personal Data to develop, optimize, and improve the performance of our services”
!How long do they keep your data?Ask the vendor
The Salesforce Trust Layer applies a zero data retention policy under which prompts and generated responses are never stored by the underlying third-party large language models. The statement is made for the Trust Layer platform-wide; it does not name Agentforce and says nothing about retention of conversation logs on the Salesforce side.
Requires written confirmation, see Before you sign ↓
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
!Who else can access your data?Ask the vendor
Salesforce discloses that the Trust Layer sends prompts to underlying third-party large language models, but none of the stashed pages names the LLM providers or model families used, for Agentforce or otherwise.
Requires written confirmation, see Before you sign ↓
“Crucially, the Trust Layer implements zero data retention and data masking to ensure the utmost security and privacy for customer data. Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models,”
“The Infrastructure & Sub-processors (“I&S”) which: • Describes the infrastructure environment for the services, • Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and • Lists the countries where customer data is stored and processed for these services.”
“Agentforce Vibes is the Salesforce enterprise vibe coding capability, and it’s now available in Developer Edition with Claude Sonnet 4.5 as the default model”
!Where is your data processed?Ask the vendor
The existence of IRAP-assessed 'Hyperforce AU' services covering Agentforce & Einstein Platform indicates an Australia-specific deployment is available, but none of the stashed pages contains a sentence committing to store or process a customer's Agentforce data in Australia; the Infrastructure & Sub-processors document that lists processing countries is referenced but not captured.
Confirm in writing: Ask the vendor to state this in writing before signing.
“IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU [PROTECTED] 2025-09-18 Hyperforce Agentforce & Einstein Platform Salesforce Services (Hyperforce)”
!What happens in a security incident?Ask the vendor
Not found in the public sources scanned — ask the vendor directly.
Confirm in writing: Ask the vendor to state this in writing before signing.
Email to send the vendor6 items to confirm in writing
Hello Salesforce team, We are assessing Agentforce (Salesforce) as part of our supplier review. Before we proceed, please confirm the following in writing: 1. Please provide your current, dated subprocessor list and explain how you notify customers of changes. 2. Do you use our data (inputs, outputs or uploaded files) to train or improve your models? Please confirm in writing, including any opt-out and whether it applies to every plan. 3. How long do you retain our data, in days, for each type (inputs, outputs, logs and backups), and how is it deleted? 4. In which countries and regions is our data processed and stored, and can processing be limited to a region we choose? 5. What is your commitment to notify customers of a security incident affecting our data, including the timeframe? 6. Please provide the IRAP Assessment Report for Einstein Platform & Agentforce AU and confirm the in-scope components, residual risks and the assessment period. A written reply to each point, or a link to where it is documented, is enough. Where a point is covered by a certification or independent report, please include the certificate number or the report and its date. Thank you,
Key findingsclick a row for the evidence
✓IRAP PROTECTED assessment explicitly names AgentforceStrong
Salesforce's compliance site lists an IRAP Assessment Report for Einstein Platform & Agentforce AU at PROTECTED (2025-06-27) and a later IRAP Report for Salesforce Services & Data Cloud on Hyperforce AU (2025-09-18) that also lists Agentforce & Einstein Platform, plus an ACSC Essential 8 report for Hyperforce AU services covering Agentforce. IRAP assessments are described as performed by independent ACSC-endorsed assessors. The reports themselves are password-protected and were not in the stash.
For Australian Government and regulated buyers an IRAP assessment at PROTECTED that names the target product is the strongest available signal of ISM alignment; it is rare for an AI agent product to be in scope by name. Because the reports are gated, the result still rests on the vendor's listing until a buyer obtains the report.
Question for vendor: Please provide the IRAP Assessment Report for Einstein Platform & Agentforce AU and confirm the in-scope components, residual risks and the assessment period.
“Name IRAP Assessment Report - Einstein Platform & Agentforce AU [PROTECTED] Updated On 2025-06-27 Infrastructure Hyperforce Services Agentforce & Einstein Platform”
“Name IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU [PROTECTED] Updated On 2025-09-18 Infrastructure Hyperforce Services Agentforce & Einstein Platform Salesforce Services (Hyperforce)”
“Name ACSC Essential 8 report - Hyperforce AU services Updated On 2025-09-18 Infrastructure Hyperforce Services Agentforce & Einstein Platform Data Cloud Marketing Cloud - Growth Edition and Marketing Cloud Advanced Edition Salesforce Services (Hyperforce) Tableau Cloud”
“IRAP assessments involve independent ACSC endorsed IRAP assessors evaluating the implementation, appropriateness and effectiveness of a system’s security controls. The IRAP assessment outcomes are documented within IRAP security assessment reports.”
“Please note some of the reports below require a password to be opened. Customers are requested to contact their Salesforce Account team to request for the password to access these reports.”
✓Trust Layer commits to zero retention and no training by third-party LLMsStrong
The Salesforce Trust Layer states that prompts and generated responses are never stored or used to train the underlying third-party large language models, that PII and proprietary data are masked before prompts leave for the LLM, and that toxicity detection filters harmful output. The statements are made for the Trust Layer across Salesforce AI rather than for Agentforce by name.
This answers the two most common buyer questions about generative AI (training on customer data, retention of prompts) favourably at the platform level. The buyer should still obtain written confirmation that Agentforce, including the Atlas Reasoning Engine, routes every LLM call through the Trust Layer.
Question for vendor: Confirm in writing that all Agentforce LLM calls, including Atlas Reasoning Engine planning steps, pass through the Einstein Trust Layer with zero data retention and masking enabled.
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“data masking is the process that replaces sensitive Personally Identifiable Information (PII) or proprietary business data with non-identifiable tokens before the prompt is sent to the LLM.”
“Toxicity detection employs advanced classification models to scan and categorize generated content in real time for signs of hate speech, bias, harassment, or other policy violations. Should harmful content be identified, the system's content filtering will automatically filter, block, or flag the output before it is displayed to the end-user, ensuring a safer and more inclusive experience for all.”
!Salesforce-side retention and usage-data processing for Agentforce not statedGap
The zero-retention commitment is limited to the underlying third-party LLMs. Nothing in the stash states how long Agentforce conversation logs, prompts, reasoning traces or outputs are retained on the Salesforce side, and the controller Privacy Statement discloses that Personal Data including Usage Data from use of Salesforce services is processed to develop, optimise and improve its services. That statement excludes processor data, so it does not condemn Agentforce, but it leaves the treatment of Agentforce usage telemetry unanswered.
A buyer assessing an agent that acts on CRM data needs the retention window for agent transcripts and audit logs and a clear statement on whether agent interaction telemetry feeds Salesforce's own model or service improvement. Neither is on the public pages captured.
Question for vendor: What is the retention period for Agentforce conversation transcripts, reasoning traces and action logs within Salesforce, and is any Agentforce usage or interaction data used to train or improve Salesforce's own models or services?
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“Developing and optimizing the performance of our services We process your Personal Data to develop, optimize, and improve the performance of our services”
“For the avoidance of doubt, our Privacy Statement does not apply to the extent we process Personal Data in the role of a processor on behalf of our customers.”
!LLM providers and sub-processors for Agentforce are not named publiclyGap
Salesforce acknowledges that the Trust Layer sends prompts to third-party large language models but no stashed page names the providers or model families. The Infrastructure & Sub-processors document, which lists sub-processors and processing countries, and the Trusted AI Resources repository are referenced but not captured. Agentforce also reaches customer-selected third-party MCP servers from AgentExchange partners, and runs on Hyperforce whose underlying cloud is not identified on these pages. The only model named anywhere in the stash is Claude Sonnet 4.5 as the default model for Agentforce Vibes (the coding assistant) in Developer Edition; that is a different product and does not establish which models the Agentforce agent platform uses.
Without the provider names a buyer cannot assess the model supply chain, cross-border flows or the contractual position of the LLM vendors. The I&S document likely answers this and should be obtained; model_provider_transparency and subprocessors_and_supply_chain are assessed as partial on that basis rather than not_evidenced.
Question for vendor: Which LLM providers and model families does Agentforce use in Australian deployments, are they listed as sub-processors in the I&S document, and where are they hosted?
“Crucially, the Trust Layer implements zero data retention and data masking to ensure the utmost security and privacy for customer data. Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models,”
“The Infrastructure & Sub-processors (“I&S”) which: • Describes the infrastructure environment for the services, • Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and • Lists the countries where customer data is stored and processed for these services.”
“Connect Agentforce to new tools and resources with secure, open interoperability through verified MCP server support from AgentExchange partners.”
“IRAP Assessment Report - Einstein Platform & Agentforce AU [PROTECTED] 2025-06-27 Hyperforce Agentforce & Einstein Platform”
“We publish model cards that describe how models were created, intended and unintended use cases, known ethical or societal implications, and performance scores. We also provide model explainability when an AI prediction or recommendation is made.”
“Agentforce Vibes is the Salesforce enterprise vibe coding capability, and it’s now available in Developer Edition with Claude Sonnet 4.5 as the default model”
!No incident-response or vulnerability-handling disclosure captured; AU residency not committedGap
vulnerability_and_incident_handling is assessed as not_evidenced, not not_applicable: Agentforce is a hosted service and Salesforce could publish breach notification, vulnerability disclosure and incident-response commitments, but the stashed pages carry only a security-blog index and a pointer to the SPARC documents that describe controls. Separately, the IRAP listings show an Australia-specific Hyperforce deployment of Agentforce exists, but no sentence commits to processing or storing customer data in Australia, so data_location is recorded as mixed rather than favourable. Change management is partial: a documentation Change Log and sub-processor notifications exist, but no model or agent behaviour change notification is described.
Incident-handling and residency commitments are standard contract items for government and regulated buyers; their absence here reflects what the public pages captured rather than a confirmed vendor failure, and the SPARC, DPA and I&S documents should be requested to close the gap.
Question for vendor: Provide the SPARC for Einstein Platform/Agentforce and the I&S document, confirm the breach notification timeframe and vulnerability disclosure process, and confirm whether Australian customers' Agentforce data is stored and processed only in Australian Hyperforce regions.
“The Security, Privacy, and Architecture (“SPARC”), which describes: • The architecture of the services, • The security and privacy related audits and certifications received for the services, and • The administrative, technical and physical controls applicable to these services.”
“IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU [PROTECTED] 2025-09-18 Hyperforce Agentforce & Einstein Platform Salesforce Services (Hyperforce)”
“Updates to the SPARC, NLI, I&S, and Trusted AI Resources Documentation are reflected in the Change Log”
“For notifications of new sub-processors click here to subscribe”
“Cybersecurity is a shared responsibility. While Salesforce builds security into everything we do and provides the necessary tools and resources to protect your data, it is also up to you to implement security controls and best practices to further strengthen the security of your Salesforce instance.”
Assurance dimensionsweighted components of one score, not eight separate ratings
Organisation & AI governance15% of the score60
Who owns AI risk: policies, responsible-AI principles, human oversight and administrative controls.
Assessed against ISO 42001 · NIST AI RMF · AIUC-1
“Let agents pursue goals across days and weeks, retain context, adapt their plans, and complete multi-touch workflows with human oversight.”
“We are also deeply committed to the responsible development and deployment of our technology, driven by our Office of Ethical and Humane Use”
“We engage with external human rights and technology ethics experts through our Ethical Use Advisory Council and workshops. We also invite feedback from our customers through Customer Advisory Boards and open dialog and incorporate it into our deliberation process.”
“Last September, Salesforce signed onto the White House’s Voluntary AI Commitments, reinforcing our dedication to designing, developing, and deploying trustworthy AI. Read the new white paper outlining our progress on these eight commitments.”
“Cybersecurity is a shared responsibility. While Salesforce builds security into everything we do and provides the necessary tools and resources to protect your data, it is also up to you to implement security controls and best practices to further strengthen the security of your Salesforce instance.”
“Information about Salesforce's principles for handling government requests for customer data and the relevant annual figures regarding such requests. Salesforce's Transparency Report (H2 2025)”
“It does not deploy anything unless you explicitly ask; by default, it modifies local project files you review first.”
Governance & accountability: vendor-evidenced, not yet independently corroborated.
AI system15% of the score47
What AI the vendor actually runs and where it sits in the product, the map everything else is judged against.
Assessed against ISO 42001 · NIST AI RMF
“Agentforce is a proactive, autonomous AI application that answers questions, takes actions and improves productivity. You can equip Agentforce with any necessary business knowledge to execute tasks according to its specific role.”
“It starts with the Atlas Reasoning Engine, which breaks down the initial prompt into smaller tasks, evaluating at each step and proposing a plan for how to proceed until the complete answer or action is achieved.”
“These agents are capable of operating 24/7 across various platforms like self-service portals and messaging channels, handling tasks proactively within set guardrails. When faced with complex issues beyond their scope, they can escalate the matter to human agents, ensuring that queries are resolved efficiently and accurately.”
“Toxicity detection employs advanced classification models to scan and categorize generated content in real time for signs of hate speech, bias, harassment, or other policy violations. Should harmful content be identified, the system's content filtering will automatically filter, block, or flag the output before it is displayed to the end-user, ensuring a safer and more inclusive experience for all.”
How AI features are evaluated before and after release, evals, red-teaming, monitoring.
Assessed against NIST GenAI · NIST AI RMF · ISO 42001
“Users can also easily observe an agent's plan of action and test their responses in Agent Builder.”
“Monitor, analyse, and optimise agent performance in near real time so you can deliver faster resolutions, higher accuracy, and better customer experiences.”
“We test our models using diverse and representative data sets that are most appropriate for how the model is being used. We seek to understand the impact of AI services on a broad range of customers, end users, and contexts. This includes conducting Consequence Scanning Workshops and Build with Intention Workshops.”
How changes to models and AI features are controlled and communicated: versioning, notice, rollback.
Assessed against ISO 27001 · ISO 42001
“Updates to the SPARC, NLI, I&S, and Trusted AI Resources Documentation are reflected in the Change Log”
“For notifications of new sub-processors click here to subscribe”
AI system description: vendor-evidenced, not yet independently corroborated.
Model10% of the scoreorganisation-level evidence40
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
Which model providers and versions process customer data, and how changes to them are disclosed.
Assessed against NIST GenAI · ISO 42001
“Crucially, the Trust Layer implements zero data retention and data masking to ensure the utmost security and privacy for customer data. Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models,”
“We publish model cards that describe how models were created, intended and unintended use cases, known ethical or societal implications, and performance scores. We also provide model explainability when an AI prediction or recommendation is made.”
“Agentforce Vibes is the Salesforce enterprise vibe coding capability, and it’s now available in Developer Edition with Claude Sonnet 4.5 as the default model”
Customer data15% of the score52
Whether customer data trains models, how long it is retained, where it is processed, and how it is protected.
Assessed against ISO 27018 · OAIC APPs · EU AI Act
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“Zero data retention is a strict policy where the prompts and generated responses are never stored or used to train the underlying third-party large language models, guaranteeing the data remains exclusively the customer's property.”
“data masking is the process that replaces sensitive Personally Identifiable Information (PII) or proprietary business data with non-identifiable tokens before the prompt is sent to the LLM.”
“IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU [PROTECTED] 2025-09-18 Hyperforce Agentforce & Einstein Platform Salesforce Services (Hyperforce)”
“Developing and optimizing the performance of our services We process your Personal Data to develop, optimize, and improve the performance of our services”
“Hosted MCP respects your org’s security model: object and field-level security, sharing rules, and profiles all apply.”
AI supply chain10% of the score40
The named chain of AI and infrastructure providers behind the product, and how it is disclosed.
Assessed against ISO 27001 · ISO 27017
“Connect Agentforce to new tools and resources with secure, open interoperability through verified MCP server support from AgentExchange partners.”
“IRAP Assessment Report - Einstein Platform & Agentforce AU [PROTECTED] 2025-06-27 Hyperforce Agentforce & Einstein Platform”
“The Infrastructure & Sub-processors (“I&S”) which: • Describes the infrastructure environment for the services, • Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and • Lists the countries where customer data is stored and processed for these services.”
Security foundation15% of the scoreorganisation-level evidence17
Graded from organisation-level evidence, it does not automatically establish assurance for this product.
How security problems are found, reported and handled: disclosure channels, bug bounty, incident response.
Assessed against ISO 27001 · NIST AI RMF
Vulnerability & incident handling: not publicly evidenced.
Independent assurance evidence10% of the score59
Whether claimed certifications and attestations are independently corroborated, checked against official registries and issuing bodies. Which certifications, and what each one does and does not establish, is stated per certificate.
Assessed against ISO 17021-1 · ISO 42006 · ISO 27006-1 · ISO 27008
“Name IRAP Assessment Report - Einstein Platform & Agentforce AU [PROTECTED] Updated On 2025-06-27 Infrastructure Hyperforce Services Agentforce & Einstein Platform”
“Name IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU [PROTECTED] Updated On 2025-09-18 Infrastructure Hyperforce Services Agentforce & Einstein Platform Salesforce Services (Hyperforce)”
“Name ACSC Essential 8 report - Hyperforce AU services Updated On 2025-09-18 Infrastructure Hyperforce Services Agentforce & Einstein Platform Data Cloud Marketing Cloud - Growth Edition and Marketing Cloud Advanced Edition Salesforce Services (Hyperforce) Tableau Cloud”
“IRAP assessments involve independent ACSC endorsed IRAP assessors evaluating the implementation, appropriateness and effectiveness of a system’s security controls. The IRAP assessment outcomes are documented within IRAP security assessment reports.”
“Salesforce also commits to comply with the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework (collectively, the “DPF”) and certifies its adherence to the DPF Principles as set forth by the U.S. Department of Commerce.”
“Please note some of the reports below require a password to be opened. Customers are requested to contact their Salesforce Account team to request for the password to access these reports.”
Read from the registry record above, cited, not reproduced.
Read from the registry record above, cited, not reproduced.
None of the corroborated certifications is AI-specific (ISO/IEC 42001 or AIUC-class) — this assurance is security and data-transfer attestation, not AI-management-system assurance.
Legal & contractual10% of the score60
The contractual backbone a buyer can rely on, terms, DPAs, privacy commitments and regulatory posture.
Assessed against EU AI Act · OAIC APPs
“We enable customers to remain in control of their data and models at all times. The data we manage does not belong to Salesforce—it belongs to the customer. We also provide customers with a clear disclosure of terms of use and the intended applications of Salesforce’s AI capability.”
“For the avoidance of doubt, our Privacy Statement does not apply to the extent we process Personal Data in the role of a processor on behalf of our customers.”
“Data Processing Addendum Data Processing Addendum FAQ Data Transfer Mechanisms FAQ Salesforce's Notice of Data Privacy Framework Certification Trust and Compliance Documentation Salesforce's Notice of APEC CBPR and PRP Certifications Salesforce's EU Processor Binding Corporate Rules Salesforce's UK Processor Binding Corporate Rules”
“The Security, Privacy, and Architecture (“SPARC”), which describes: • The architecture of the services, • The security and privacy related audits and certifications received for the services, and • The administrative, technical and physical controls applicable to these services.”
“The service and features branded as “Agentforce” including: Agentforce Assistant Agentforce Coworker Agentforce Employee Agent Agentforce SDR Agentforce Sales Coach Agentforce Service Agent Einstein Bots”
Legal & contractual transparency: vendor-evidenced, not yet independently corroborated.
Not graded: Agent, not applicable to this scan.
What would strengthen assuranceeach figure is from today's score, resolving one changes the others
Resolving an evidence gap strengthens the dimension it belongs to, and with it the score: 46 → up to 77 with every identified gap resolved.
AI supply chainclick a node to focus it · drag to pan · zoom with the controls
View as list
What you inheritTrustyCyber's AI Shared Responsibility Matrix v1.0
This scan names the vendor’s AI supply chain without assessing the responsibility split, that depends on how you consume the product. Under the common managed models, a deployer inherits 16 of the matrix’s 41 responsibilities from providers, each with named evidence owed.
Map your inherited responsibilitiesAssurance evidence: certifications 5, registry checks and verification ladders, click to view
PROTECTED level. IRAP Assessment Report - Einstein Platform & Agentforce AU (infrastructure Hyperforce) dated 2025-06-27; IRAP Report - Salesforce Services & Data Cloud on Hyperforce AU dated 2025-09-18 also lists Agentforce & Einstein Platform. Reports are password-protected and obtained via the Salesforce account team.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
ACSC Essential 8 report - Hyperforce AU services dated 2025-09-18, covering Agentforce & Einstein Platform, Data Cloud, Marketing Cloud Growth/Advanced Editions, Salesforce Services (Hyperforce) and Tableau Cloud. Maturity level not stated.
Not yet checked against a registry. Treat it as the vendor’s own claim and ask the vendor for the current certificate.
Self-certification to the EU-U.S. DPF, Swiss-U.S. DPF and UK Extension with the U.S. Department of Commerce; organisation-wide transfer mechanism, not product-specific.
Checked against Data Privacy Framework (dataprivacyframework.gov), Nov 1, 2026: Verified on the registry
Not claimed in any public source scanned. This is the AI-management-system certification — in its absence, the vendor’s AI governance rests on its general security and privacy certifications.
Checked against FedRAMP Marketplace (fedramp.gov), Nov 1, 2026: Verified on the registry
Sources 15, click to view
Appendix: standards landscape 8, click to view
Where each standard behind this assessment stands today, from TrustyCyber’s continuously maintained standards radar.
This automated result is based on publicly available information at the time of scanning. It is not an audit, certification, legal opinion or assurance engagement. Publicly unavailable evidence may materially change the conclusion.
Monitor for changes
Get an email if its TRUSTYCYBER Score, grade or certifications change. One credit per refresh; reading the report always stays free.