Sales Cloud is a modern cloud application platform that enables you to run your entire sales process. Sales Cloud is built on the trusted Salesforce Platform and helps you connect your customer touchpoints across disparate systems, apps, and departments — giving you a single view of your customer. Built into the platform is a rich set of controls that helps you manage the lifecycle of customer data and track the preferences and consent of end users. The foundation of the Salesforce Platform relies on built-in security and trust.
You may need to delete your customers' and prospects' data to comply with data protection and privacy regulations. Sales Cloud offers all the features of the Salesforce Platform that enable you to meet your obligations under the GDPR. Deletions of Salesforce instances (orgs) are synced regularly.
You can use the Salesforce Platform to help you honor your customers’ requests to export their data. Data can be extracted via both UI-driven and API-driven methods, including reports and report/dashboard APIs, data loader, Apex, SOAP and REST APIs, and third-party ETL tools. Export formats include CSV, JSON, and XML.
Respect your customers’ and prospects’ wishes when they request only specific forms of contact from your company. Sales Cloud helps you comply with data protection and privacy regulations, including out-of-the-box support for indicating do not call, email opt-out, and fax opt-out preferences. Custom Objects and Fields provide a richer consent regime as well.
In Sales Cloud, records can be identified, exported, and deleted upon receiving a verified request to restrict processing. If the restriction is lifted at a later date, the records can be re-imported.
Salesforce offers a robust data processing addendum containing strong privacy commitments that few software companies can match. This addendum contains data transfer frameworks ensuring that our customers can lawfully transfer personal data to Salesforce outside of the European Economic Area by relying on either the Binding Corporate Rules for Processors, our Privacy Shield certification, or the Standard Contractual Clauses (depending on the service in question). This addendum also contains specific provisions to assist customers in their compliance with the GDPR.
Salesforce has security built into every layer of the platform. The infrastructure layer comes with replication, backup, and Disaster Recovery planning. Network services has encryption in transit and advanced threat detection. Our application services implement identity, authentication, and user permissions. We also offer an additional layer of trust with Salesforce Shield, including Platform Encryption, Event Monitoring, and Field Audit Trail.
“We are committed to our customers’ success, including compliance with the GDPR.”
- Raise awareness of the importance of GDPR compliance with organization leaders
- Obtain executive support for necessary staff resources and financial investments
- Choose someone to lead the effort in becoming GDPR-compliant
- Build a steering committee of key functional leaders
- Identify privacy champions throughout the organization
- Obtain executive support for necessary staff resources and financial investments
- Choose someone to lead the effort in becoming GDPR-compliant
- Build a steering committee of key functional leaders
- Identify privacy champions throughout the organization
- Review existing privacy and security efforts to identify strengths and weaknesses
- Identify all the systems where the organization stores personal data, and create a data inventory
- Create a register of data processing activities and carry out a privacy impact assessment for each high-risk activity
- Document compliance
- Identify all the systems where the organization stores personal data, and create a data inventory
- Create a register of data processing activities and carry out a privacy impact assessment for each high-risk activity
- Document compliance
- Ensure privacy notices are present wherever personal data is collected
- Implement controls to limit the organization’s use of data to the purposes for which it collected the data
- Establish mechanisms to manage data subject consent preferences
- Implement appropriate administrative, physical, and technological security measures and processes to detect and respond to security breaches
- Establish procedures for responding to data subject requests for access, rectification, objection, restriction, portability, and deletion (right to be forgotten)
- Enter into contracts with affiliates and vendors that collect or receive personal data
- Establish a privacy impact assessments process
- Administer employee and vendor privacy and security awareness training
- Implement controls to limit the organization’s use of data to the purposes for which it collected the data
- Establish mechanisms to manage data subject consent preferences
- Implement appropriate administrative, physical, and technological security measures and processes to detect and respond to security breaches
- Establish procedures for responding to data subject requests for access, rectification, objection, restriction, portability, and deletion (right to be forgotten)
- Enter into contracts with affiliates and vendors that collect or receive personal data
- Establish a privacy impact assessments process
- Administer employee and vendor privacy and security awareness training
- Compile copies of privacy notices and consent forms, the data inventory and register of data processing activities, written policies and procedures, training materials, intracompany data transfer agreements, and vendor contracts
- If required, appoint a data protection officer and identify the appropriate EU supervisory authority
- Conduct periodic risk assessments
- If required, appoint a data protection officer and identify the appropriate EU supervisory authority
- Conduct periodic risk assessments
