A cloud-based customer relationship management (CRM) platform that provides sales, marketing, and customer service software to businesses of all sizes. The company also offers additional business applications including analytics, automation tools, and development platforms that handle vast amounts of customer and business data. Their policies are significant for consumers because millions of businesses use Salesforce to store and process personal information from their customers, making the platform's data handling practices crucial for privacy protection across numerous industries.

2 Documents
33 All provisions 1 High severity 18 Medium severity 14 Low severity
1 Changes · 12 mo
May 1, 2026 Last change

High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.

Governance Coverage
Privacy Rights
23 provisions · 9 high · 14 med
Data Sharing
14 provisions · 8 high · 6 med
Data Collection
10 provisions · 3 high · 7 med
Contract Terms
10 provisions · 5 high · 3 med
Ai Automated
6 provisions · 2 high · 3 med
Liability Limitation
4 provisions · 2 high · 2 med
Legal Jurisdiction
3 provisions · 2 high · 1 med
Data Retention
3 provisions · 3 med
Policy Changes
2 provisions · 2 med
Arbitration
2 provisions · 1 high · 1 med
Quick Facts
Arbitration: Mandatory
AI Training: Disclosed (high impact)
Data Retention: Specified
Key Governance Provisions
High AI use limited to legally permissible purposes

This clause establishes express restrictions on how Salesforce may deploy AI, tying its use to legal permissibility, the Privacy Statement, and Salesforce's own stated standards.

High Salesforce does not sell Personal Data under CCPA

This clause establishes that CCPA's opt-out-of-sale rights are not triggered because Salesforce does not engage in the sale of Personal Data as defined under the CCPA.

High EEA and UK users may complain to supervisory authority

This clause confirms a formal regulatory escalation path for EEA and UK individuals, giving them recourse beyond Salesforce's own complaint-handling process.

High Right to erasure or deletion of Personal Data

Individuals have a recognized right to seek removal of their Personal Data held by Salesforce.

High Adequate protection required for international transfers

This clause establishes that Salesforce takes on a contractual obligation to vet the data-protection standards of international recipients before transferring Personal Data to them.

Document Coverage
Privacypolicy Termsofservice
Last change detected: May 1, 2026 Changes (12 months): 1 Documents monitored: 2 Provisions tracked: 33
Compare With Similar Platforms
ActiveCampaign Airtable Amazon Marketplace Amplitude Apple App Store Asana Auth0 Box

Documents

Salesforce Privacy Statement

Medium

This document explains how Salesforce collects, uses, and shares your personal information when you interact with Salesforce directly—though it does not cover data Salesforce handles on behalf of its business …

Last updated May 5, 2026 · Privacy policy
10 provisions 3 versions captured Version history →

Salesforce Terms of Service

Low

This document sets out Salesforce's core commitments to its customers, including that trust is its top priority. It confirms that customers have rights to access, transfer, or delete their data …

Last updated May 5, 2026 · Terms of service
5 provisions 2 versions captured Version history →
📈 Policy Drift Analysis View all changes →

Low Severity Provisions (14)

View all high severity provisions → Compare Salesforce with other platforms →

Applicable Regulations

EU AI Act
European Union
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
Colorado AI Act
US-CO
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Texas AI Act
Texas, USA
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗

Compare with Similar Platforms

ActiveCampaign
platform
Airtable
platform
Amazon Marketplace
platform
Amplitude
platform
Apple App Store
platform
Asana
platform
Auth0
platform
Box
platform

Frequently Asked Questions

What Salesforce documents does ConductAtlas track?

ConductAtlas tracks 2 Salesforce documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has Salesforce made in the past year?

Salesforce has made 1 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for Salesforce?

ConductAtlas has classified 33 provisions across Salesforce's tracked documents. 1 are rated high severity, 18 medium, and 14 low.

Can I get alerts when Salesforce changes their policies?

Yes. Monitor subscribers ($4.99/month) can add Salesforce to their watchlist and receive same-day email alerts whenever any tracked document changes.