Black Snow IntelligenceBlack Snow Intelligence
Black Snow Report

Salesforce

Method v1.6As At 2026-08-118 Surfaces Read2 Offerings Assessed

Your own published record, as at 2026-08-11.

Your Details

The Macro Picture34

Amber · Partial
0
of 34 banded observations across 2 offerings band Adverse. 2 were never measured.

1 conditional row (Hosting Locality = Hyperforce EU Operating Zone selected by the customer) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.

What Is Published8

Your Own Words3

As of the Effective Date, SFDC has no reason to believe that the laws and practices in any third country where it Processes European Personal Data as set forth in the Infrastructure and Sub-processors Documentation, including any requirements to disclose European Personal Data or measures authorizing access by a Public Authority, prevent SFDC from fulfilling its obligations under this DPA.
Section 12.5, Impact of Local Laws · Source
If, in the performance or use of the Services, European Personal Data is subject to a Third-Country Transfer, the transfer mechanisms listed below shall apply: Salesforce Processor BCR ... SCC Module 2. Where Customer is a Controller and a data exporter ... SCC Module 3. Where Customer is a Processor acting on behalf of a Controller and a data exporter.
Section 12.4, Transfer Mechanisms for Data Transfers · Source
Bright Data Inc. Global ... Batch Processing via Azure OpenAI utilizes global endpoints, geo-aware routing rules are not supported ... In the event of a failover, Customer Data is temporarily re-routed to an endpoint hosted on Microsoft Azure and priority will be given to the region in which Customer's org is provisioned, subject to availability.
Einstein Generative AI Services table, pages 76–78 · Source

Parties You Name17

See which of these are assessed in this register

Register Check3

AI Role By Offering2

Assessment Basis

Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.

Read from 8 first-party surface(s) across 2 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.

Fact Record
Version 1.0, dated 2026-08-11
Standards Commit
66058de9d9a2
Register Control Quality
Both Views

Verification And Challenge

Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-11. Correspondence route as recorded on this card input: ror@blacksnowintel.com.

What A Machine Could Not Establish1

1 question is open and 7 are established, read as at 2026-08-11 under method v1.6.

The One Thing To Publish First

Publish it: say whether decisions about people are made automatically.

Amber · PartialAutomated Decision-Making

salesforce-services Published; agentforce-einstein-generative-ai Published But Incomplete

Where To Put It

No page on your own surfaces was carrying an answer to this question when you were read, so there is no address to correct — this one needs a home before it needs wording.

Where Others Stand

4 organisations in the register say whether decisions about people are made automatically. On one of your two assessed offerings you publish on it but not completely, which is what this row is banded on.

What A Published Answer Looks Like

Under certain laws, residents may also be permitted to opt out of certain profiling relating to automated processing analyzing certain categories of an individual's information that would produce a legal or similarly significant effect. [the vendor] does not engage in this type of profiling of individuals.

A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published trust or security page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.

One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.

Still Open

Deep Dive

The full assessment, plus consulting on what to fix.

Reviewing your record is free.