Salesforce Einstein / Agentforce
Salesforce Einstein / Agentforce (Einstein Trust Layer)
Provider: Salesforce, Inc. · Based in: San Francisco, CA, USA · Provider website
- Plans
- 6
- Sources
- 10
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 3 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- mixed: all 6 plans
- Training on inputs
- no: all 6 plans
- DPA
- yes: all 6 plans
- Provider
- Salesforce, Inc.
- Based in
- San Francisco, CA, USA (415 Mission St., 3rd Floor; Privacy Statement)
Values from 6 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Salesforce Einstein / Agentforce
Compare with another toolCompared plan by plan with other tools in the category Business software:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | Salesforce Foundations (start Agentforce free of charge)Compare Salesforce Einstein / Agentforce Salesforce Foundations (start Agentforce free of charge) with another tool | Flex Credits (consumption-based)Compare Salesforce Einstein / Agentforce Flex Credits (consumption-based) with another tool | Conversations (per conversation)Compare Salesforce Einstein / Agentforce Conversations (per conversation) with another tool | Agentforce User LicenseCompare Salesforce Einstein / Agentforce Agentforce User License with another tool | Agentforce Add-ons (Sales, Service, Field Service, Operations / Industries)Compare Salesforce Einstein / Agentforce Agentforce Add-ons (Sales, Service, Field Service, Operations / Industries) with another tool |
|---|---|---|---|---|---|
| differs by plan | 0 USD | 500 USD | 2 USD | 5 USD/user/mo | 125 USD/user/mo… (further prices in the details) |
| Details: Price | USD 0 (Salesforce Foundations, incl. Agentforce Builder, Prompt Builder, Agentforce Coworker and others; as of 2026-10-14) | USD 500 per 100,000 Flex Credits (as of 2026-10-14; pricing page shows a USD/EUR converter, EUR 500 per 100k) | USD 2 per conversation; for customer-facing agents, cannot be used in the same org as Flex Credits (as of 2026-10-14) | USD 5 per user/month, requires Flex Credits (as of 2026-10-14) | USD 125 per user/month (Sales/Service/Field Service/Operations add-ons) or USD 150 per user/month (Industries add-ons), unlimited employee agent usage (as of 2026-10-14) |
| yes | yes | yes | yes | yes | |
| Details: AI features included | yes | yes | yes | yes | yes |
| yes | yes | yes | yes | yes | |
| Details: DPA | yes (on request) Provider’s DPA | yes (on request) Provider’s DPA | yes (on request) Provider’s DPA | yes (on request) Provider’s DPA | yes (on request) Provider’s DPA |
| no | no | no | no | no | |
| Details: Training on inputs | Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). SPARC and Notices apply to the "Covered Services branded as Agentforce" without differentiating by edition; Salesforce Foundations is not named separately there (q7, q8). | Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). | Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). | Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). | Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). |
| External LLM providers: Zero Data… | External LLM providers: Zero Data… | External LLM providers: Zero Data… | External LLM providers: Zero Data… | External LLM providers: Zero Data… | |
| Details: Data retention | External LLM providers: Zero Data Retention according to the Trust page; according to the Notices, no retention or use beyond automated safety classification (q7). After the end of the contract (SPARC, q8): return on request within 30 days; customer data may then remain in inactive status for up to 120 days and is subsequently overwritten or deleted within 120 days. | External LLM providers: Zero Data Retention according to the Trust page; according to the Notices, no retention or use beyond automated safety classification (q7). After the end of the contract (SPARC, q8): return on request within 30 days; customer data may then remain in inactive status for up to 120 days and is subsequently overwritten or deleted within 120 days. | External LLM providers: Zero Data Retention according to the Trust page; according to the Notices, no retention or use beyond automated safety classification (q7). After the end of the contract (SPARC, q8): return on request within 30 days; customer data may then remain in inactive status for up to 120 days and is subsequently overwritten or deleted within 120 days. | External LLM providers: Zero Data Retention according to the Trust page; according to the Notices, no retention or use beyond automated safety classification (q7). After the end of the contract (SPARC, q8): return on request within 30 days; customer data may then remain in inactive status for up to 120 days and is subsequently overwritten or deleted within 120 days. | External LLM providers: Zero Data Retention according to the Trust page; according to the Notices, no retention or use beyond automated safety classification (q7). After the end of the contract (SPARC, q8): return on request within 30 days; customer data may then remain in inactive status for up to 120 days and is subsequently overwritten or deleted within 120 days. |
| mixed | mixed | mixed | mixed | mixed | |
| Details: Hosting | Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others. | Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others. | Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others. | Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others. | Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others. |
| list available | list available | list available | list available | list available | |
| Details: Sub-processors |
|
|
|
|
|
| 7 sources | 7 sources | 7 sources | 7 sources | 7 sources | |
| Details: Sources with retrieval date |
|
|
|
|
|
Price and scope
- differs by plan
- 0 USD
USD 0 (Salesforce Foundations, incl. Agentforce Builder, Prompt Builder, Agentforce Coworker and others; as of 2026-10-14)
- yes
yes
Contract and data use
- yes
yes (on request)
Provider’s DPA- no
Documentation does not differentiate by plan. Trust Layer: "prompts and generated responses are never stored or used to train the underlying third-party large language models" (Zero Data Retention). Einstein Platform Notices (Published 2026-05-22, q7): OpenAI, Azure, Google and Anthropic (via AWS) "have contracted to not otherwise retain or use Customer Data sent to the model" (apart from automated safety classification). Use by Salesforce itself: the Einstein Platform SPARC (Published 2026-07-24, q8) permits the use of customer data "on an aggregate basis for purposes such as research, marketing, analysis, and benchmarking, and other purposes reasonably required to develop, deliver, and provide ongoing innovation to the Covered Services", without personally identifiable data; the documentation contains no express statement on training Salesforce's own models. For Einstein Conversation Insights, Salesforce employees may review customer data "for the purposes of improving and training the product" (q7). SPARC and Notices apply to the "Covered Services branded as Agentforce" without differentiating by edition; Salesforce Foundations is not named separately there (q7, q8).
- External LLM providers: Zero Data…
- External LLM providers: Zero Data Retention according to the Trust page; according to the Notices, no retention or use beyond automated safety classification (q7). After the end of the contract (SPARC, q8): return on request within 30 days; customer data may then remain in inactive status for up to 120 days and is subsequently overwritten or deleted within 120 days.
Hosting and sharing
- mixed
Infrastructure-and-Sub-processors documentation (Published 2026-10-02): Einstein Generative AI Services process at OpenAI in the USA (failover rerouting to Azure, priority to the org region), at Azure OpenAI in several regions incl. the EU (e.g. France, Germany, Sweden), at Google/AWS in the nearest disclosed region (e.g. Germany, Netherlands; failover via US endpoints); batch processing via Azure OpenAI uses global endpoints without geo-routing. According to a footnote, Agentforce Coworker only in certain regions (e.g. USA, Netherlands or Germany, France, Italy, Sweden). Org hosting on Hyperforce/AWS in selectable regions incl. Germany, France, Ireland and others.
- list available
- OpenAI, L.L.C. (generative AI, USA; on failover rerouting to an Azure endpoint)
- Microsoft Corporation (Microsoft Azure / Azure OpenAI; regions incl. USA, Switzerland, France, Germany, Sweden, UK and others)
- Google LLC (generative AI; "disclosed region closest to Customer's Salesforce Org", e.g. Germany, Netherlands; failover via Google endpoint in the USA)
- Amazon Web Services, Inc. (hosting and generative AI provider, including Anthropic models via AWS according to the Notices q7; Agentforce Speech: AWS Polly/Transcribe)
- Bright Data Inc. (web search for generative AI, only if enabled by the customer)
- SuSea, Inc. (dba You.com; web search for generative AI, only if enabled by the customer)
- Temporal Technologies Inc. (orchestration of background workflows; incl. USA, Germany, UK)
- Eleven Labs Inc. (text-to-speech/speech-to-text, Agentforce Speech Foundations)
- Deepgram, Inc. (speech-to-text, Agentforce Speech Foundations; also self-hosted on AWS)
Evidence
- differs by plan
- 7 sources
- Trusted AI / Einstein Trust LayerTrust Center, retrieved 18 Oct 2026
- Salesforce Infrastructure and Sub-processors (Published 2026-10-02)Sub-processor list, retrieved 18 Oct 2026
- Salesforce Data Processing Addendum (Revision August 2026)DPA, retrieved 14 Oct 2026
- Agentforce PricingPricing page, retrieved 18 Oct 2026
- Trust and Compliance DocumentationDocumentation, retrieved 18 Oct 2026
- Einstein Platform Notices and License Information (Published 2026-05-22)Documentation, retrieved 18 Oct 2026
- Einstein Platform Security, Privacy and Architecture (Published 2026-07-24)Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
DPA (revision August 2026) contains EU standard contractual clauses (Decision (EU) 2021/914, Module Two and Module Three; incl. Swiss adaptation); signing the DPA is deemed signing of the SCCs. The DPA also refers to the Salesforce Processor BCRs and provides that transfers to US entities certified under the EU-US Data Privacy Framework are not treated as transfers to a third country. Privacy page refers to the DPF certification notice as well as EU and UK Processor BCRs (titles read, content not opened). DPF List (retrieved 2026-10-18): Salesforce (San Francisco, CA) active for the EU-U.S. DPF, the Swiss-U.S. DPF and the UK Extension (HR and non-HR data) (q10); according to the SPARC, customer data of the Agentforce services is within the scope of these certifications and of the Processor BCRs (q8).
- Salesforce Data Processing Addendum (Revision August 2026) (DPA), retrieved 14 Oct 2026
- Salesforce Privacy Statement (effective 2026-05-19) (Privacy notice), retrieved 7 Oct 2026
- Einstein Platform Security, Privacy and Architecture (Published 2026-07-24) (Documentation), retrieved 18 Oct 2026
- Data Privacy Framework List – Salesforce (Official register), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Einstein Platform Security, Privacy and Architecture (SPARC, Published 2026-07-24, q8): ISO 27001/27017/27018 certification of the ISMS for Agentforce, among others; ISO 42001: "Agentforce and Einstein (AI Platform) are certified under the ISO 42001 accreditation"; SOC 2 evaluation for Agentforce, among others (reports on request via the account executive); APEC PRP, EU and UK Processor BCRs, Data Privacy Framework; IRAP registration (Australia) for Agentforce and Prompt Builder, among others; ISMAP only for Einstein Case Classification and Einstein Prediction Builder. According to a footnote, these audits and certifications applicable to Agentforce "generally" do not apply to Agentforce for Scale and Agentforce Vibes.
- Einstein Platform Security, Privacy and Architecture (Published 2026-07-24) (Documentation), retrieved 18 Oct 2026
AI Act
Functions: Generative AI (text, summaries, draft replies), autonomous agents (Agentforce), voice (text-to-speech/speech-to-text), Prompt Builder, Einstein predictions; Trust Layer with data masking and toxicity detection.
Provider’s statement: not publicly documentedno AI Act match on the Trusted AI page; the page names five Trusted AI principles
Classification (for review, not legal advice): For review: customer typically deployer (Art. 3(4)). Agents interacting with natural persons possibly Art. 50(1); generated text/audio possibly Art. 50(2) (provider) or Art. 50(4). Not legal advice.
- Trusted AI / Einstein Trust Layer (Trust Center), retrieved 18 Oct 2026
Current notes 2026
DPA with revision August 2026 (source q3); Infrastructure-and-Sub-processors documentation published 2026-10-02 with web search sub-processors (Bright Data, You.com) and Deepgram for speech (source q2); pricing page additionally lists a Conversations model (USD 2/conversation) and Agentforce Add-ons (source q4).
Open points of the review
- Training of its own models by Salesforce: the SPARC and Notices contain no express statement; only the aggregated use of customer data without personally identifiable data for further development is documented (q8)
- Salesforce Foundations: not named separately in the SPARC and Notices; whether all commitments (Trust Layer, certifications) apply identically to the free entry offering is not expressly documented
- Agentforce 1 Editions: mentioned only in the FAQ of the Agentforce pricing page, without a price of their own; relationship to the Max Editions not explained
Frequently asked questions
Where does Salesforce Einstein / Agentforce store data?
mixed (plans: Salesforce Foundations (start Agentforce free of charge), Flex Credits (consumption-based), Conversations (per conversation), Agentforce User License, Agentforce Add-ons (Sales, Service, Field Service, Operations / Industries), Agentforce Max Editions (Sales/Service/Industries)). According to the provider, as of 18 Oct 2026.
Is there a DPA for Salesforce Einstein / Agentforce?
yes in: Salesforce Foundations (start Agentforce free of charge), Flex Credits (consumption-based), Conversations (per conversation), Agentforce User License, Agentforce Add-ons (Sales, Service, Field Service, Operations / Industries), Agentforce Max Editions (Sales/Service/Industries). According to the provider, as of 18 Oct 2026.
Does Salesforce Einstein / Agentforce use inputs for AI training?
no in: Salesforce Foundations (start Agentforce free of charge), Flex Credits (consumption-based), Conversations (per conversation), Agentforce User License, Agentforce Add-ons (Sales, Service, Field Service, Operations / Industries), Agentforce Max Editions (Sales/Service/Industries). According to the provider, as of 18 Oct 2026.
Where is the provider based?
San Francisco, CA, USA (415 Mission St., 3rd Floor; Privacy Statement). According to the provider, as of 18 Oct 2026.
All sources
- 01Trusted AI / Einstein Trust LayerTrust Center · retrieved 18 Oct 2026
- 02Salesforce Infrastructure and Sub-processors (Published 2026-10-02)Sub-processor list · retrieved 18 Oct 2026
- 03Salesforce Data Processing Addendum (Revision August 2026)DPA · retrieved 14 Oct 2026
- 04Agentforce PricingPricing page · retrieved 18 Oct 2026
- 05Trust and Compliance DocumentationDocumentation · retrieved 18 Oct 2026
- 06Salesforce Privacy Statement (effective 2026-05-19)Privacy notice · retrieved 7 Oct 2026
- 07Einstein Platform Notices and License Information (Published 2026-05-22)Documentation · retrieved 18 Oct 2026
- 08Einstein Platform Security, Privacy and Architecture (Published 2026-07-24)Documentation · retrieved 18 Oct 2026
- 09Sales Cloud PricingPricing page · retrieved 18 Oct 2026
- 10Data Privacy Framework List – SalesforceOfficial register · retrieved 18 Oct 2026
More tools in Business software with an EU hosting option (in at least one plan)
- DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
- HubSpot Breeze AI · Based in: Cambridge, MA, USA
- Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
- Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH
All tools in Business software · Tools with an EU hosting option
Further reading
All tools in the category: Business software. Figures across all tools: Data report.