Salesforce AI Footnotes
What Salesforce's AI features do with your data, as Salesforce publishes it. Checked October 31, 2026. Salesforce in the Directory.
Agent access
Salesforce Hosted MCP Servers are generally available for Enterprise Edition orgs and above; admins enable each server in Setup > API Catalog > MCP Servers. The Agent API gives REST access to Agentforce agents, except agents of type Agentforce (Default). source, source 2, source 3, source 4 · checked October 31, 2026
Stage: generally available. Authentication: Hosted MCP servers: OAuth and PKCE through an External Client App with the mcp_api and refresh_token scopes; each call runs as the authenticated user with existing permissions. Agent API: an External Client App with OAuth (the client credentials flow or another flow that issues a JWT-based access token) and the api, refresh_token, offline_access, chatbot_api and sfap_api scopes.
Agentforce
Agentforce 360 Platform (customer-facing and employee-facing agents)
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | Prompts and responses are not stored or used to train the third-party LLMs (zero data retention). source · checked October 31, 2026 |
| Retention | Salesforce has zero data retention agreements with third-party LLM providers such as OpenAI. source · checked October 31, 2026 |
| Where data is processed | When an LLM endpoint is hosted on AWS, the disclosed region closest to the customer's Salesforce org applies. source · checked October 31, 2026 |
| Model providers | The Salesforce Default model option is a managed mix that currently includes OpenAI GPT-4o; the AWS-Hosted option uses Anthropic Claude on Amazon Bedrock. The sub-processor list names OpenAI, Microsoft Azure, Google and Amazon Web Services as generative AI providers for Einstein Generative AI Services, which include Agentforce. source, source 2, source 3, source 4 · checked October 31, 2026 |
| Price | Consumption: Flex Credits at 500 USD per 100,000 credits; an Agentforce action is 20 Flex Credits and an Agentforce Voice action is 30 (list prices as published). source, source 2 · checked October 31, 2026 |
Agentforce customer-facing agents (Conversations)
Agentforce 360 Platform
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Not published as of October 31, 2026 |
| Trains on customer data? | Not published as of October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Consumption: 2 USD per conversation for customer-facing agents (list price as published). source · checked October 31, 2026 |
Einstein generative AI (Einstein for Sales, Einstein for Service)
Sales Cloud and Service Cloud
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Setup > Quick Find > Einstein Setup > Turn on Einstein; Data 360 must be provisioned first. source, source 2 · checked October 31, 2026 |
| Trains on customer data? | Prompts and responses are not stored or used to train the third-party LLMs (zero data retention). source · checked October 31, 2026 |
| Retention | Zero data retention with third-party LLM providers. source · checked October 31, 2026 |
| Where data is processed | Batch processing via Azure OpenAI uses global endpoints, and geo-aware routing rules do not apply to it. source · checked October 31, 2026 |
| Model providers | OpenAI, L.L.C., Microsoft Corporation (Microsoft Azure), Google LLC and Amazon Web Services are listed as providers of generative AI services for Einstein Generative AI Services. source, source 2, source 3 · checked October 31, 2026 |
| Price | Add-on: Agentforce add-ons for Sales, Service, and Field Service at 125 USD per user per month, with unmetered employee Agentforce usage (list price as published). source · checked October 31, 2026 |
Agentforce Coworker
Standalone per-user license
| On by default? | From August 10, 2026, turned on automatically, on a rolling basis, for users with unmetered user-based AI seats. HIPAA, health and life sciences and government orgs, multi-org topologies and usage-based seats are excluded. source, source 2 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Before automatic enablement: Setup > Agentforce Coworker > Opt Out of Auto Activation, or the opt-out link in the notice email. After it: the Agentforce Coworker toggle in Agentforce Coworker Setup. source, source 2 · checked October 31, 2026 |
| Trains on customer data? | Not published as of October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | The sub-processor list gives two region sets for Agentforce Coworker: the United States and the Netherlands (Google), and the United States, Australia, France, Germany, Italy, Japan and Sweden (Amazon Web Services). source · checked October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Per user: 50 USD per user per month (list price as published). Searching CRM and Slack through Coworker uses no Flex Credits for users with Agentforce 1 Edition or Agentforce for Sales, Service or Industries seats. source, source 2 · checked October 31, 2026 |
Connections to outside MCP servers
Agentforce agents connect to outside MCP servers that an admin registers in the Agentforce Registry in Setup, with the endpoint and authentication method. Servers that require authentication must support OAuth 2.0, and tools are assigned per agent in Agent Builder. source, source 2, source 3 · checked October 31, 2026
Compliance
- HIPAA: Covered by the Salesforce BAA (restrictions last updated September 30, 2026) as Einstein Services, including Agentforce Assistant, Agentforce Voice, Agentforce Sales Coach, Agentforce SDR, Agentforce Service Agent, Einstein GPT for Sales and Service, and Prompt Builder. Data Masking in the Einstein Trust Layer must be on for Agentforce Services and Prompt Builder. Agentforce Coworker is not covered. source, source 2, source 3 · checked October 31, 2026
- FedRAMP: Agentforce in Government Cloud Plus is FedRAMP High authorized, a level Salesforce's Government Cloud pricing page now labels FedRAMP Class D. Agentforce in Government Cloud Plus - Defense is DoD Impact Level 5 authorized. source, source 2 · checked October 31, 2026
EU AI Act
Salesforce's EU AI Act FAQ (updated September 2026) says Salesforce in most cases acts as a provider of AI systems, not of general-purpose AI models, and that its third-party LLM partners carry the GPAI obligations. source, source 2, source 3 · checked October 31, 2026
Not published by Salesforce as of October 31, 2026
- Release stage of Agentforce connections to outside MCP servers
- Whether customer data trains Salesforce's own models (published statements cover third-party LLMs)
- Retention period for Einstein generative AI audit and feedback data stored in Data 360
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.