Make vs. Salesforce Einstein / Agentforce: data protection per plan

yes (Celonis Data Processing Agreement for Make, version May 2024; DPF as the primary transfer mechanism, standard contractual clauses Module Two as fallback; SCCs for European customers additionally linked as a separate document); terms page: 'Your use of the Services is subject to the terms of the Data processing agreement' (thus applies to all plans)

yes (Celonis Data Processing Agreement for Make, version May 2024; DPF as the primary transfer mechanism, standard contractual clauses Module Two as fallback; SCCs for European customers additionally linked as a separate document); terms page: 'Your use of the Services is subject to the terms of the Data processing agreement' (thus applies to all plans)

yes (Celonis Data Processing Agreement for Make, version May 2024; DPF as the primary transfer mechanism, standard contractual clauses Module Two as fallback; SCCs for European customers additionally linked as a separate document)

yes (on request)

yes (on request)

yes (on request)

yes (on request)

yes (on request)

yes (on request)

Neither the pricing page, the security page, the privacy notice nor the DPA (version May 2024) mentions model training on customer data; likewise no statement in the help centre article 'AI providers and data zones in Make' or in the Make section of the Celonis Trust Center. Master Services Agreement for Make (March 2026), clause 6.2: licence to customer data 'solely as necessary to provide the Services'; DPA Annex 1: usage analysis only in anonymised form. Privacy notice: Google Workspace APIs are not used to train general AI/ML models. The Celonis Trust Center contains a training commitment only for the 'Celonis Platform', not for Make. Express training rules for Make: not publicly documented.

Neither the pricing page, the security page, the privacy notice nor the DPA (version May 2024) mentions model training on customer data; likewise no statement in the help centre article 'AI providers and data zones in Make' or in the Make section of the Celonis Trust Center. Master Services Agreement for Make (March 2026), clause 6.2: licence to customer data 'solely as necessary to provide the Services'; DPA Annex 1: usage analysis only in anonymised form. Privacy notice: Google Workspace APIs are not used to train general AI/ML models. The Celonis Trust Center contains a training commitment only for the 'Celonis Platform', not for Make. Express training rules for Make: not publicly documented.

as above: not publicly documented (no statement on training for Make on the pricing page, in the DPA, MSA, help centre or Trust Center).

Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). SPARC and Notices apply to the "Covered Services branded as Agentforce" without differentiating by edition; Salesforce Foundations is not named separately there (q7, q8).

Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7).

Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7).

Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7).

Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7).

Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7).

Sub-processor list (effective 2025-12-12): AWS hosting for non-Enterprise customers in Ireland or the USA; database for EU customers in Ireland; AI sub-processors: hosting in the USA (Microsoft France). Help centre 'AI providers and data zones in Make': data zones US1, US2, EU1, EU2; 'Selecting the EU1 or EU2 data zone does not automatically mean every request gets processed and stays in the EU.' Always in the USA (OpenAI): Maia, Make AI Web Search, all OpenAI models in Make's AI Provider, AI Content Extractor (image description, audio translation); always in the EU (Microsoft Azure AI services): the other AI Content Extractor functions. Own connections: EU processing guaranteed only for Microsoft Foundry, Amazon Bedrock and OpenAI-compatible endpoints, not for Anthropic, OpenAI, Google Gemini, Mistral AI, Cohere, Groq and xAI. According to the same page, some features route to the United Kingdom: Claude Sonnet 4.6 and Opus 4.6 in Make's AI Provider 'are served from a UK Bedrock region'; for further Claude models the table also lists, among others, Zurich and London for EU zones.

Sub-processor list (effective 2025-12-12): AWS hosting for non-Enterprise customers in Ireland or the USA; database for EU customers in Ireland; AI sub-processors: hosting in the USA (Microsoft France). Help centre 'AI providers and data zones in Make': data zones US1, US2, EU1, EU2; 'Selecting the EU1 or EU2 data zone does not automatically mean every request gets processed and stays in the EU.' Always in the USA (OpenAI): Maia, Make AI Web Search, all OpenAI models in Make's AI Provider, AI Content Extractor (image description, audio translation); always in the EU (Microsoft Azure AI services): the other AI Content Extractor functions. Own connections: EU processing guaranteed only for Microsoft Foundry, Amazon Bedrock and OpenAI-compatible endpoints, not for Anthropic, OpenAI, Google Gemini, Mistral AI, Cohere, Groq and xAI. According to the same page, some features route to the United Kingdom: Claude Sonnet 4.6 and Opus 4.6 in Make's AI Provider 'are served from a UK Bedrock region'; for further Claude models the table also lists, among others, Zurich and London for EU zones.

Sub-processor list: AWS hosting in Germany for Enterprise; Trust Center: infrastructure in private AWS EC2 instances (Amazon VPC), cluster across two zones. Help centre 'AI providers and data zones in Make': data zones US1, US2, EU1, EU2; 'Selecting the EU1 or EU2 data zone does not automatically mean every request gets processed and stays in the EU.' Always in the USA (OpenAI): Maia, Make AI Web Search, all OpenAI models in Make's AI Provider, AI Content Extractor (image description, audio translation); always in the EU (Microsoft Azure AI services): the other AI Content Extractor functions. Own connections: EU processing guaranteed only for Microsoft Foundry, Amazon Bedrock and OpenAI-compatible endpoints, not for Anthropic, OpenAI, Google Gemini, Mistral AI, Cohere, Groq and xAI. According to the same page, some features route to the United Kingdom: Claude Sonnet 4.6 and Opus 4.6 in Make's AI Provider 'are served from a UK Bedrock region'; for further Claude models the table also lists, among others, Zurich and London for EU zones.

Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.

Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.

Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.

Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.

Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.

Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.

• Amazon Web Services (hosting; location selectable: USA or Germany (Enterprise) or Ireland (others))
• MongoDB (database; EU customers Germany (Enterprise) or Ireland, non-EU customers USA)
• Supabase (database for Make and Grid; EU customers Ireland, otherwise USA)
• 84codes (execution; region as for AWS)
• AI: OpenAI OpCo (USA), Anthropic Ireland (hosting USA), Google (USA), Microsoft (France), Groq (USA)
• E2B.dev (code execution, USA)
• Cloudflare (CDN; data of European customers only via EU servers), Mixpanel (Netherlands), Rudderstack, Freshdesk (Germany) and others
• Group: Celonis SE, Celonis s.r.o. (Czech Republic, support) and others

• Amazon Web Services (hosting; location selectable: USA or Germany (Enterprise) or Ireland (others))
• MongoDB (database; EU customers Germany (Enterprise) or Ireland, non-EU customers USA)
• Supabase (database for Make and Grid; EU customers Ireland, otherwise USA)
• 84codes (execution; region as for AWS)
• AI: OpenAI OpCo (USA), Anthropic Ireland (hosting USA), Google (USA), Microsoft (France), Groq (USA)
• E2B.dev (code execution, USA)
• Cloudflare (CDN; data of European customers only via EU servers), Mixpanel (Netherlands), Rudderstack, Freshdesk (Germany) and others
• Group: Celonis SE, Celonis s.r.o. (Czech Republic, support) and others

• Amazon Web Services (hosting; location selectable: USA or Germany (Enterprise) or Ireland (others))
• MongoDB (database; EU customers Germany (Enterprise) or Ireland, non-EU customers USA)
• Supabase (database for Make and Grid; EU customers Ireland, otherwise USA)
• 84codes (execution; region as for AWS)
• AI: OpenAI OpCo (USA), Anthropic Ireland (hosting USA), Google (USA), Microsoft (France), Groq (USA)
• E2B.dev (code execution, USA)
• Cloudflare (CDN; data of European customers only via EU servers), Mixpanel (Netherlands), Rudderstack, Freshdesk (Germany) and others
• Group: Celonis SE, Celonis s.r.o. (Czech Republic, support) and others

• OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
• Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
• Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
• Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
• Bright Data Inc. (web search for generative AI, only if enabled by the customer)
• SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
• Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
• Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
• Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)

• OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
• Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
• Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
• Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
• Bright Data Inc. (web search for generative AI, only if enabled by the customer)
• SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
• Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
• Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
• Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)

• OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
• Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
• Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
• Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
• Bright Data Inc. (web search for generative AI, only if enabled by the customer)
• SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
• Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
• Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
• Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)

• OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
• Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
• Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
• Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
• Bright Data Inc. (web search for generative AI, only if enabled by the customer)
• SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
• Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
• Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
• Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)

• OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
• Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
• Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
• Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
• Bright Data Inc. (web search for generative AI, only if enabled by the customer)
• SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
• Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
• Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
• Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)

• OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
• Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
• Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
• Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
• Bright Data Inc. (web search for generative AI, only if enabled by the customer)
• SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
• Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
• Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
• Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)

USD 0 (1,000 credits per month; minimum interval of 15 minutes between scheduled runs)

Base tier 10,000 credits per month: with annual billing Core USD 9, Pro USD 16, Teams USD 29 per month ('Save 15 %'), with monthly billing USD 10.59, USD 18.82, USD 34.12. Higher credit tiers with monthly billing (Core/Pro/Teams per month): 20,000 credits USD 18.82/34.12/62.35; 40,000: USD 34.12/62.35/116.47; 80,000: USD 64.71/107.06/203.41; 150,000: USD 116.47/180.53/343.01; 300,000: USD 214.31/315.93/600.26; from 500,000 credits Core 'Not available' (500,000: Pro USD 482.67, Teams USD 917.06; 750,000: Pro USD 678.75, Teams USD 1,289.62). No indication whether VAT is included. All plans with 'Unlimited users' according to the pricing page; Teams additionally teams and team roles. AI surcharge: no separate AI credit; AI features via Make's AI Provider partly consume more credits.

Individual (pricing page: 'Talk to sales')

USD 0 (Salesforce Foundations, incl. Agentforce Builder, Prompt Builder, Agentforce Coworker and others; as of 2026-10-14)

USD 500 per 100,000 Flex Credits (as of 2026-10-14; pricing page shows a USD/EUR converter, EUR 500 per 100k)

USD 2 per conversation; for customer-facing agents, cannot be used in the same org as Flex Credits (as of 2026-10-14)

USD 5 per user/month, requires Flex Credits (as of 2026-10-14)

USD 125 per user/month (Sales/Service/Field Service/Operations add-ons) or USD 150 per user/month (Industries add-ons), unlimited employee agent usage (as of 2026-10-14)

from USD 550 per user/month, includes Agentforce add-on and 2.75 million Flex Credits per org/year (as of 2026-10-14). Sales Cloud pricing page (as of 2026-10-18): Max USD 550 or EUR 550 per user/month, billed annually, no indication whether VAT is included (q9)

yes (Make AI Agents (beta), AI Toolkit, Maia, MCP server, AI Content Extractor and AI Web Search also included in the Free plan according to the pricing page; 'Make's AI Provider (all plans) or your own LLM key'; 1,000 credits per month; Make Code App not included)

yes (Make AI Agents (beta) and AI Toolkit in all plans: 'Make's AI Provider (all plans) or your own LLM key'; 10,000 credits per month in the base tier; Make Code App 2 credits per second)

yes (as above; separate AWS environment; extended log storage)

yes

yes

yes

yes

yes

yes