Provision record
Salesforce · Salesforce Privacy Statement · View original document ↗

Salesforce acts as Personal Data controller

High severity High confidence Explicit document language Common · 297 of 352 platforms

Key Facts

Who acts as the controller of a reader's Personal Data and is responsible for its processing?
Salesforce, Inc. and/or its affiliated entities act as the controllers of a reader's Personal Data and are responsible for its processing, unless expressly specified otherwise in the full Privacy Statement.
Stay ahead of the changes
Track Salesforce and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Salesforce's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Identifying Salesforce and its affiliates as data controllers establishes who bears legal accountability for Personal Data processing decisions under applicable privacy law.

Clause Stability Stable

0
Changes
5
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 6356 other provisions on other platforms.

Consumer impact (what this means for users)

A reader's Personal Data is controlled and processed by Salesforce, Inc. and/or its affiliates, making them the accountable parties—except where the full Privacy Statement expressly states otherwise.

How other platforms handle this

Cerebras Medium

This Policy does not apply to Personal Data we process in our role as a data processor or service provider on behalf of our customers and partners.

ClickUp Medium

Please be aware that this Privacy Policy does not govern all the information ClickUp may process. Our commitment to customers and service providers is governed by a separate Data Protection Addendum.

Revolut Medium

Please keep your details up to date and let us know immediately if any information you've given us changes.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Salesforce, Inc. and/or its affiliated entities...act as the controllers of your Personal Data and are responsible for its processing, unless expressly specified otherwise in our full Privacy Statement.

Excerpt from Salesforce's Privacy Statement

Provision details

Document information
Document
Salesforce Privacy Statement
Entity
Salesforce
Document last updated
May 5, 2026
Tracking information
First tracked
May 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-031813
Document ID
CA-D-00202
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
906367235ff8fca154a96b8875671b5ce81f50e21d644d966ef899d5c1e5e037
Analysis generated
May 9, 2026 16:18 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Salesforce
Document: Salesforce Privacy Statement
Record ID: CA-P-031813
Captured: 2026-05-09 16:18:56 UTC
SHA-256: 906367235ff8fca1…
URL: https://conductatlas.com/platform/salesforce/salesforce-privacy-statement/provision/CA-P-031813/salesforce-acts-as-personal-data-controller/
Accessed: Aug. 24, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Salesforce's Salesforce acts as Personal Data controller clause do?

Identifying Salesforce and its affiliates as data controllers establishes who bears legal accountability for Personal Data processing decisions under applicable privacy law.

How does this clause affect you?

A reader's Personal Data is controlled and processed by Salesforce, Inc. and/or its affiliates, making them the accountable parties—except where the full Privacy Statement expressly states otherwise.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 297 platforms. See the full comparison.

Is ConductAtlas affiliated with Salesforce?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Salesforce.