For businesses in regulated sectors such as healthcare, financial services, or government, Salesforce's compliance posture directly affects whether they can legally use Salesforce to process sensitive data.
This page is primarily a navigation hub and does not itself impose legal obligations on consumers, but it links to agreements and policies that do govern how Salesforce collects, uses, and protects user data. The EU Data Act reference is notable — as of September 2025, EU customers gained enforceable rights to access, transfer, or delete their data held by Salesforce. You can follow the links on this page to find the specific customer agreement or privacy policy that applies to your Salesforce product to understand your rights and obligations.