AI tool privacy · Salesforce
Salesforce Agentforce and your company’s data
By David Michaelson, MS Last checked October 23, 2026
The short answer
Salesforce says it does not currently use customer data to train generative AI models, would need you to opt in before it did, and has zero data retention agreements so outside AI providers neither keep nor train on your data.
Safer setup: Treat Agentforce like the rest of your Salesforce org: the same user permissions, retention rules, and deletion process apply, because the data stays in the underlying Salesforce services.
The five answers
Each answer comes from Salesforce’s own policy or help pages, with the link and the date we read it. Setting names are quoted exactly as Salesforce writes them.
We could not confirm 2 answers on Salesforce’s own pages. Those answers say so in plain words and link to the page we checked.
| Question | Salesforce orgs using Agentforce |
|---|---|
| Trains on your data by default? | No. Salesforce says it does not currently use customer data to train generative AI models, that any future training would require you to opt in, and that its zero data retention policy stops outside AI providers from keeping or training on your data. Read on October 23, 2026 Source: salesforce.com |
| How long your data is kept | Under the rules of the Salesforce service your data lives in. Salesforce says Agentforce does not store customer data itself, so the retention and deletion rules of the underlying service apply, and outside AI providers keep none of it. Read on October 23, 2026 Source: salesforce.com |
| Who can see it | The pages we read do not describe which Salesforce staff can see Agentforce prompts or responses. Page checked: salesforce.com, October 23, 2026 |
| Where data is stored | The pages we read say data is stored in your underlying Salesforce services but do not name a country or region. Page checked: salesforce.com, October 23, 2026 |
| How to delete | Delete the records in the underlying Salesforce service. Salesforce says customer data is stored there, not in Agentforce. Read on October 23, 2026 Source: salesforce.com |
Safer setup, step by step
- Before you turn on Agentforce, review who can see which records, because Agentforce works on the data stored in your Salesforce services. Source: salesforce.com for this step
- Do not opt in to any future offer to train generative AI on your data without a decision from the business owner. Salesforce says such training would require your opt-in. Source: salesforce.com for this step
- Use your Salesforce services’ normal retention and deletion rules for anything Agentforce touched, since Agentforce does not store customer data itself. Source: salesforce.com for this step
What to write in your policy
Staff use Agentforce only inside our company Salesforce org, under their normal record permissions. Nobody opts the company in to AI training without the owner’s approval.
Building your own approved tools list? The SafeStart Handbook includes one, with company accounts and safer privacy settings.