Monitor Salesforce compliance pages

Enterprise CRM — Sales Cloud, Service Cloud, Marketing Cloud, Data Cloud, and Einstein AI (Agentforce) across a sprawling product portfolio.

Salesforce publishes several compliance and legal pages that change over time. Under GDPR Article 28, data controllers using Salesforce as a processor must continuously verify that "sufficient guarantees" remain in place — which means tracking changes to these pages as they happen. Below are the 4 most relevant pages, what typically changes on each, and ready-to-paste monitoring prompts.

Monitor all 4 pages automatically

Choose the pages that matter most and get an alert when something meaningful changes. The free plan covers 3 monitors.

Start with 3 free monitors →

Pages to monitor

Sub-processor list

https://compliance.salesforce.com/en/documents/a00Kd00000z7FAnIAM ↗

Typical change frequency: quarterly

What to monitor

  • Einstein AI and Agentforce sub-processors (LLM providers)
  • Changes to per-product sub-processor lists (Sales Cloud vs Marketing Cloud vs Slack vs Tableau)
  • Data Cloud (formerly CDP) sub-processor changes
  • Hyperforce infrastructure partner changes by region
  • MuleSoft and Tableau-specific sub-processor additions

Suggested monitoring prompt

Alert me when Salesforce updates any product sub-processor list — especially Einstein/Agentforce AI, Data Cloud, or Hyperforce regional partners. Report product, sub-processor name, and purpose. Note: Salesforce publishes many separate lists.

Data Processing Agreement

https://www.salesforce.com/company/legal/agreements/ ↗

Typical change frequency: yearly

What to monitor

  • Changes to Einstein AI and Agentforce data provisions
  • Updates to Hyperforce data residency commitments
  • Modifications to cross-product data sharing (post-Slack, post-Tableau integration)
  • Transfer mechanism changes (SCCs, DPF)

Suggested monitoring prompt

Monitor the Salesforce DPA for changes to AI data handling, Hyperforce residency, cross-product sharing, or transfer mechanisms.

Privacy policy

https://www.salesforce.com/company/privacy/ ↗

Typical change frequency: yearly

What to monitor

  • Changes to Einstein GPT and Agentforce data training practices
  • Updates to Data Cloud unified profile data usage
  • New sharing across Salesforce ecosystem (Slack, Tableau, MuleSoft)
  • Changes to marketing cloud end-user tracking

Suggested monitoring prompt

Alert me when Salesforce changes Einstein/Agentforce AI data practices, Data Cloud profile usage, or cross-product data sharing. Ignore editorial updates.

Status page

https://status.salesforce.com/ ↗

Typical change frequency: weekly

What to monitor

  • Instance-level incidents (NA, EMEA, APAC pods)
  • Hyperforce incidents
  • API and integration outages
  • Einstein AI availability issues

Suggested monitoring prompt

Alert me on Salesforce instance incidents, Hyperforce problems, API outages, or Einstein AI issues. Ignore minor pod-specific issues not affecting my region.

Compliance certifications

SOC 1/2/3ISO 27001ISO 27017ISO 27018PCI-DSSHIPAAFedRAMP HighGDPR

Data location

Hosting locations: United States, European Union, United Kingdom, Germany, Japan, Australia, Canada, Brazil, India

EU-US Data Privacy Framework: Certified

Related

Ready to start monitoring Salesforce?

Set up monitoring free →