Vendor record · salesforce.com

What Salesforce promises about your data.

Where Salesforce publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.

Where it publishes

Salesforce lists its sub-processors at compliance.salesforce.com/documents/a00Kd00000z7FAnIAM. We last read it on October 15, 2026.

What has changed

We've recorded no change to its sub-processor list or data processing agreement between September 12, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.

Its window

We couldn't quote a notice window: we watch www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf for Salesforce's data processing agreement, but the site's robots.txt asks automated readers not to fetch this document, so we do not read it.

Window
—

no window we can quote yet

Sub-processors
1

sub-processors named

Pages
5

pages we watch

Copies
25

dated copies of all its pages, since August 31, 2026

Salesforce DPA

We watch www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf for Salesforce's data processing agreement, and the site's robots.txt asks automated readers not to fetch this document, so we do not read it. There is no sub-processor notice window we can quote.

Notice windows across every vendor we watch

Salesforce sub-processors

Salesforce publishes a sub-processor list at compliance.salesforce.com/documents/a00Kd00000z7FAnIAM; we last read it on October 15, 2026. It names 1 entry. The entry, as the list prints them: Salesforce, Inc.. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.

1 named · full table

Every public change we have recorded · Where vendors publish their lists

How long Salesforce keeps your data

We hold no statement about data retention from Salesforce's watched pages. The pages we watch: pricing page salesforce.com/pricing; privacy policy salesforce.com/privacy; status page status.salesforce.com/; sub-processor list compliance.salesforce.com/documents/a00Kd00000z7FAnIAM; terms of service www.salesforce.com/company/legal/sfdc-website-terms-of-service/.

Retention windows vendors publish · What vendors say about training

What the pages say

Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.

Sub-processors named · 1

Salesforce, Inc.

Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105

United States

International transfer notice · United States

“International transfers of Personal Data Your Personal Data may be transferred to and stored by us in the United States and by our affiliates and third-parties listed in Section 6 above.”

salesforce.com/privacy · read 2026-10-13

The pages' own stamps: Effective 2026-05-19 · last updated 2025-04-08

The pages we watch

Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.

Where we get nothing

What Salesforce does not publish where we can read it

Of the 5 public pages we watch for Salesforce, these give us nothing right now.

Data processing agreement

the site's robots.txt asks automated readers not to fetch this document, so we do not read it

www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf

Trust and security

the page at that URL is not that document

www.salesforce.com/platform/cloud-data-security/

Before you conclude anything

This only means we couldn’t read it on a public page. Salesforce may share it in its agreement, a trust portal, or with any customer who asks.

So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”

What this page doesn’t tell you

No score.

Nothing here rates Salesforce. A short notice window is a contract term, not a criticism.

Public pages only.

Private notices and negotiated terms are invisible to us. Your agreement may say something different.

Wrong? Tell us.

Corrections are free, always. We reply within 2–3 business days.

How we read a page · The change log

Work at Salesforce? With an email at salesforce.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.

Is Salesforce in your product? Hear the morning we read a change.

You get the lines that moved, in Salesforce’s own words, and the date any window closes. No card. Nothing to cancel.

Every vendor we watch · Redline, our free weekly email