Salesforce’s contract limits AI processing to customer instructions.
Salesforce’s Main Services Agreement says customer data processed by services with AI features will only be processed in line with the customer’s documented instructions.
In June 2026, Salesforce published a new Main Services Agreement dated June 1, 2026. In August, its Privacy Statement dropped the reference to a U.S.-based third-party dispute resolution provider for unresolved privacy concerns.
We monitor 54 Salesforce documents. Most updates we detect are to page tracking code, cookie notices and product names rather than to the terms themselves.
What Salesforce’s documents say about client data.
Quoted from the current version of each document. The right-hand column shows how many of the 75 vendors we monitor have a matching clause.
Using customer data to train AI
Addressed“Processing of Customer Data by Services that include AI features or functionality will only be in accordance with Customer's documented instructions.”
Sharing data with third parties
Addressed“Your Personal Data may be transferred to, and stored by us, in the United States and by our affiliates and third parties (as disclosed in the full Privacy Statement).”
What changed, and when.
Notable changes since monitoring began in March 2026, newest first. Each is written from our automated comparison of the before and after versions, then reviewed by a person.
Listed a Developer Main Services Agreement and API license terms
The Partner Agreements page added both documents and revised its EU Data Act notice to link to Salesforce’s privacy page.
Added an External Products section to its AgentExchange partner terms
Defines External Products and sets approval, security and indemnity terms for partners listing them.
Removed the third-party dispute resolution route from its Privacy Statement
The Privacy Statement no longer directs unresolved privacy concerns to a U.S.-based third-party dispute resolution provider.
Added AI disclosure and access-control commitments to its use policy
AI responses respect real-time access controls, and agents are built to tell users when they are interacting with AI.
Published a new Main Services Agreement dated June 1, 2026
Replaces the September 15, 2025 version and updates the table of contracting entities, notice recipients and governing law by region.
+ 209 other updates detected, such as formatting, page layout and wording changes.
- Sep 18, 2026: Affiliate Purchasing Guidelines (December 22, 2025 - Present)
- Sep 18, 2026: Customer Data Cloud Editions
- Sep 18, 2026: Agentforce Rates
- Sep 18, 2026: Trust and Compliance Documentation
- Sep 18, 2026: Supplemental Terms for Foreign Jurisdictions (June 21, 2023 - Present)
- Sep 17, 2026: Ethical and Humane Use Policy
- Sep 16, 2026: Legal Center
- Sep 16, 2026: Public Policy
54 Salesforce documents.
Sub-documents are other Salesforce documents that its policies link to, such as addenda and product terms. We list the ones identified so far; there may be others.
Salesforce terms: common questions.
Does Salesforce use customer data to train AI?
Salesforce’s Main Services Agreement says customer data processed by services with AI features will only be processed in accordance with the customer’s documented instructions.
When did Salesforce last change its terms?
Salesforce’s Partner Agreements page changed on September 12, 2026, listing a Developer Main Services Agreement. Its Main Services Agreement has a new version dated June 1, 2026.
Does Salesforce publish a sub-processor list?
Salesforce publishes a Supplier & Subprocessor Privacy Exhibit and an infrastructure and sub-processors document, which we monitor along with its Data Processing Addendum.