Slack/https://slack.com/slack-subproce…

notice

https://slack.com/slack-subprocessors

20,320 words, 1936 clausesno date on the pageread 25/09/2026source

·Copyright 2000 - 2026 Salesforce, Inc. All rights reserved. Salesforce is a registered trademark of Salesforce, Inc., as are other names and marks. Other marks appearing herein may be trademarks of their respective owner.

·Salesforce Infrastructure and Sub-processors

·Published: September 22, 2026 Scope This documentation describes the infrastructure environment, sub-processors and certain other entities material to the services and managed packages listed in the Infrastructure and Sub-processors Table below (collectively, for the purposes of this document only, the "Covered Services"). Services or features not yet generally available may be included within the list of Covered Services for the purpose of providing Customers advance notice of new sub-processors or processing locations. Any reference to future services or features does not obligate Salesforce to make those services or features available. Capitalized terms used in this documentation are defined in Salesforce's MSA and/or Data Processing Addendum.

·Some Covered Services are hosted on Salesforce's own first-party infrastructure. Many of the Covered Services are fully or partly hosted on third- party infrastructures (e.g., Hyperforce), which operate as Salesforce's sub-processors. For more information about Hyperforce, see below. Many of the Covered Services run across multiple infrastructures as identified in the Infrastructure and Sub-processors Table below. Our Services are interconnected in order to provide more features to Customers within a single service. This can happen in a few different ways. For instance:

·● Some Services run primarily on one infrastructure, but have some features that run partly or entirely on different infrastructures. For example, for many Customers, most Sales Cloud features run on the Salesforce's first-party infrastructure, but Sales Cloud also includes Einstein1 Features that run on the Einstein Platform infrastructure. Similarly, the Marketing Cloud Engagement Services are based primarily on the Marketing Cloud Engagement infrastructure, but some features of Marketing Cloud run partially on Einstein Platform or Marketing Cloud Einstein infrastructure. If these features are enabled, Customer Data will be processed by these additional infrastructures.

·● Some Services may inherently copy data from one infrastructure onto another infrastructure for processing to function. For example, this happens when Sales Cloud Customer Data is copied into the Sales Cloud Einstein-specific infrastructure, for artificial intelligence analytics, before the scores and predictions are written back into the original Sales Cloud infrastructure. Another example is Intelligence Reports for Engagement may pull a copy of Customer Data from Marketing Cloud Engagement onto its own infrastructure to provide reporting functionality.

·If a Covered Service includes features which run across multiple infrastructures using different sub-processors or hosted in different locations, the Infrastructure and Sub-processors Table will list each infrastructure involved in running the Service as a separate "purpose of processing" row detailing how, and for what features, each infrastructure is used.

11 Rights of ALBERT EINSTEIN are used with permission of The Hebrew University of Jerusalem. Represented exclusively by Greenlight.

·Sub-processor Notifications

·Salesforce Customers may subscribe to notifications of new sub-processors for those Covered Services for which Customer has a then-current active subscription by filling out this form.

·Sub-processors Storing Customer Data

·Many Services offer multiple alternative locations to process and/or store Customer Data. Except as set forth in the "Additional Details" column in the Infrastructure and Sub-processors Table, each cell listing countries in the table below represents an available "region" in which Salesforce processes and/or stores data for a given purpose. For example, for the Salesforce Services, data from our Germany data center is backed up into France, and so France and Germany are listed in the same cell to indicate that the "region" includes both countries. If France and Germany are in separate cells for a given purpose of processing, your Customer Data would only be stored in one of the two countries.

·When a Service offers alternative locations to process/and or store data, the Customer may be able to choose their region during the setup process or by working with an Account Executive.2 You may also request to have your Customer Data for a Covered Service or feature hosted in a different region, which may be accommodated, subject to availability. Further, if your Customer Data is hosted in a different region for one Covered Service, this may also affect where your data is hosted in other related services (e.g., hosting data in Europe for Service Cloud will cause your Service Cloud Einstein data to be hosted in Europe). If you have any questions about where your data is stored that this Documentation does not answer, please contact Customer Support.

·In addition to the locations identified in the below Infrastructure and Sub-processors tables, Salesforce may store across its processing locations identifying information about Customers' instance(s) and identifying information about Users for the purpose of operating the Services, such as facilitating the login process and the provision of customer support. For the Government Cloud Plus and Government Cloud Plus - Defense Services, this information (except for business address) will be encrypted with a one-way hash algorithm before it leaves the Government Cloud Plus and Government Cloud Plus - Defense-specific data centers, rendering it unreadable to Salesforce and its cloud providers.

·Customer Support

·Salesforce uses its online services to provide customer support, including generative artificial intelligence. Sub-processors for the online services are listed below.

22 Sandbox copies are created at a data center level; any instance can refresh to any sandbox within a data center. Sandbox copies in a data center may be redirected to another data center in the same region, if necessary, to maintain performance levels. As an example, an EMEA-based sandbox instance could redirect to another EMEA data center. Temporary developer testing environments branded as "Scratch Orgs" may be provisioned in a different Salesforce- operated data center from a Customer's instance of the Covered Services, but within the same region as such instance. Scratch Orgs created by public cloud Customers reside within the Public Cloud Infrastructure.

·Content Delivery Networks ("CDNs") CDNs are utilized to optimize content delivery for certain Covered Services as listed in the Infrastructure and Sub-processors Table. CDNs are commonly used systems of distributed services that expedite the transmission of content. Note that if a CDN is described as "Global" in the Table, it may process data in any country, regardless of the Customer's location, to better support end-users of the applicable Covered Services.

·Salesforce offers highly customizable software used by Salesforce Customers across a variety of industries and businesses. Salesforce sells functionality to Customers in many packages, which we call SKUs.

·Sometimes these SKUs only include functionality from one or more Services. But often, these SKUs can bundle functionality from one or more Services, along with additional, industry-specific functionality to customize the Service to an industry or business need.

·One particular example of this is the "Salesforce Services": Chatter, Experience Cloud (formerly Community Cloud), Database.com, Lightning Platform (including Force.com), Sales Cloud, Service Cloud, and Site.com). Because the Salesforce Services functionality is bundled in so many different ways in different SKUs, the Infrastructure and Sub-processors Table cannot tell you whether or not the SKU you purchase contains a particular feature within the Salesforce Services. Instead, the table lists all features that appear in any packaging of the Salesforce Services. If you have a question about whether the SKU you purchase contains a particular feature, consult the Help and Training Documentation or your Account Executive.

·Hyperforce

·Hyperforce is Salesforce's next-generation infrastructure foundation for deploying application stacks on commercial cloud providers. An up-to- date list of available regions for Hyperforce can be found here. Not all Covered Services hosted on Hyperforce are available in every location.

·Please see the charts below for available locations for individual Covered Services. Due to the ongoing situation in the Middle East, orgs hosted in the UAE as well as new trial org sign ups and Scratch Orgs from Lebanon, Bahrain, Oman, Jordan, Qatar, Kuwait, Egypt, or the UAE will be routed to a location in the European Union. In addition, Customer Data of commercial Customer orgs in Israel will be temporarily backed up to a location in the EU until the crisis has resolved.

·Support For All Services

·Note that for support of the Covered Services designated as "Services on the Hyperforce Operating Zone infrastructure" or "HF OZ", in limited circumstances, Customer Data may be stored and/or processed outside of the available region selected by Customer and as described in the "Services on the Hyperforce Operating Zone Infrastructure" section of the Hyperforce SPARC.

·Purpose of Processing Sub-processors Locations Additional Details Support services, including technical operations support Salesforce, Inc.

·Salesforce Argentine

·S.R.I.

·SFDC Australia Pty. Ltd.

·SFDC Austria GmbH

·Salesforce Tecnologia, Ltda.

·salesforce.com Canada Corporation salesforce.com France, S.A.S.

·salesforce.com Germany GmbH salesforce.com India Private Limited SFDC Ireland Limited salesforce.com Israel Ltd.

·Salesforce.com Italy S.r.l Salesforce Japan Co., Ltd.

·SFDC Netherlands B.V.

·salesforce.com Singapore Pte. Ltd.

·Salesforce.com Korea Limited Salesforce Systems Spain S.I.

·SFDC Sweden AB

·salesforce.com Sarl United States Argentina Australia Austria Brazil Canada France Germany India Ireland Israel Italy Japan The Netherlands Singapore South Korea Spain Sweden

·Salesforce.com (Thailand) Co., Ltd.

·Salesforce UK Limited

·Switzerland

·Thailand

·United Kingdom

·Service provider of customer support tools WithSecure Inc. (hosted by Amazon Web Services, Inc.)

·Ireland

·United States

·Used for scanning documents attached to cases submitted by the Customers Users for malicious content.

·Service provider of customer support tools Projector.is, Inc. (hosted by Amazon Web Services, Inc.)

·United States Used by Customer Support for screen sharing and co- browsing to help resolve customer issues.

·Service provider of customer support tools Google LLC Global Used by Customer Support for screen sharing and co- browsing to help resolve customer issues.

·Agentforce IT Service

·Agentforce IT Service runs partially on the Lightning Platform and Service Cloud infrastructures - see infrastructure details for Salesforce Services. It includes a component, CMDB, that runs on Hyperforce as noted below. It also includes the following Einstein features: Case Classification, which run on the Salesforce Services infrastructure and use the following additional sub-processor:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Einstein Case Classification.

·Amazon Web Services, Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·Sweden

·Israel

·South Africa

·Hosting Provider for Configuration

·Management Database (CMDB) (Hyperforce infrastructure). Customer Data is hosted in the following region.

·Amazon Web Services, Inc.

·United States

·Agentforce Speech Foundations

·Agentforce Speech Foundations is an add-on to the Salesforce Services--see infrastructure details for Salesforce Services -and provider of text to speech and speech to text services in Einstein Generative AI Services, voice offerings such as Agentforce Voice, and translation services supported in Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Provider of text-to-speech services Amazon Web Services, Inc. (AWS Polly) Australia Canada France Germany

·India

·Japan

·Singapore

·South Korea

·United Kingdom

·United States

·Amazon Web Services, Inc. (Eleven Labs Inc. self- hosted) France Japan United States United Kingdom Eleven Labs Inc. Belgium United States India Provider of speech-to-text services Amazon Web Services, Inc. (AWS Transcribe) Australia Brazil Canada France Germany India Japan Singapore South Korea Sweden United Kingdom

·United States

·Amazon Web Services, Inc. (Deepgram, Inc. self- hosted) United States Deepgram, Inc. United States Germany Provider of translation services Amazon Web Services, Inc. (AWS Translate) Australia The Real-Time Translations feature within Enhanced Chat and Enhanced Messaging uses, at Customer's selection, Amazon Web Services, Inc. (AWS Translate) or Google's Translation LLM API to provide translation services.

·The Real Time Translations features are also utilized by Service Cloud such as Case Details, Case Comments, and Service Email.

·Canada

·France

·Germany

·India

·Japan

·Singapore

·South Korea

·Sweden

·United Kingdom

·United States

·Google LLC (Google Translation LLM API) Australia Canada France Germany India Japan Singapore

·South Korea

·Sweden

·United Kingdom

·United States

·Provider of WebRTC and SIP functionality to support Agentforce Voice LiveKit, Inc. France Germany United Kingdom Singapore India Israel Saudi Arabia UAE South Africa United States Brazil Australia Japan Agentforce Operations (f/k/a Agentforce Supply Chain) Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality. Amazon Web Services, Inc.

·United States

·Provider of generative artificial intelligence services.

·Google LLC United States

·10

·User analytics provider. Pendo.io, Inc. United States Apromore Services Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality and provider of generative artificial intelligence services.

·Amazon Web Services, Inc.

·Australia

·United States

·Automotive Cloud

·For Automotive Cloud (including Digital Origination, f/k/a Digital Lending for Automotive) see infrastructure details for Salesforce Services. Some Customers who purchase Automotive Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Some Customers who purchase Automotive Cloud may have access to Channel Revenue Management (ChRM), see infrastructure details for Salesforce Services. Automotive Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider of document generation processing for Server-Side Document Generation feature. Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·11

·Sweden

·United Kingdom

·Service provider of runtime services used by Automotive Cloud APIs powered by MuleSoft. Customer Data is processed in one of the following regions.

·Amazon Web Services, Inc.

·United States If a Customer: (a) enables the Automotive Cloud APIs powered by MuleSoft feature as an add-on to Automotive Cloud, and (b) has Customer Data transmitted using runtime services, that Customer Data will be processed on AWS infrastructure.

·Brazil

·Canada

·Australia

·Japan

·Singapore

·Germany

·Ireland

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Provider of generative artificial intelligence services.

·OpenAI, L.L.C. United States In the event of a failover, Customer Data is temporarily re-routed to an endpoint hosted on Microsoft Azure and priority will be given to the region in which 12

·Customer's org is provisioned, subject to availability.

·Salesforce Backup (formerly Backup and Restore) Salesforce Backup is an add-on feature for the Salesforce Services-see infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·France

·Germany

·Sweden

·United Kingdom

·Germany

·Sweden

·United Kingdom

·South Korea

·B2B Commerce (from Version 3.97 or higher, formerly branded as CloudCraze) Also see infrastructure details for Salesforce Services. Salesforce may route the transmission of Customer Data to Users through any of its data centers, but the storage of Customer Data will be limited to the data centers for the Customers' org. For B2B Commerce on Lightning Experience, see infrastructure details for Salesforce Services. 13

·B2B Commerce on Lightning Experience B2B Commerce runs on the same infrastructure as the Salesforce Services. See infrastructure details for Salesforce Services.

·D2C Commerce (formerly B2B2C Commerce) Also see infrastructure details for Salesforce Services.

·Commerce Messaging is a feature that is available as an add-on to D2C Commerce; for Customers who use Commerce Messaging, see infrastructure details for Marketing Cloud: Marketing Cloud Engagement Services and Salesforce Data 360, as Commerce Messaging runs on both of these infrastructure.

·Cimulate

·For Customers who use Cimulate as an add-on to Commerce Cloud/B2C Commerce, see infrastructure details for Commerce Cloud/B2C Commerce.

·Sub-processor for this Service is:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality. Google LLC United States Commerce Cloud/B2C Commerce Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for B2C Commerce (which may include Managed Runtime), B2C Commerce Order Management, and Commerce Cloud Einstein. Customer Data is hosted in one of the following regions.

·Salesforce, Inc. United States Any reference to "B2C Commerce Order Management" refers to the version of Order Management released prior to February 19, 2020.

·SFDC Australia Pty. Ltd. Australia salesforce.com France S.A.S.

·salesforce.com Germany GmbH Salesforce UK Limited France Germany United Kingdom SFDC Sweden AB SFDC Netherlands B.V.

·Sweden

·The Netherlands

·14

·If Customer is hosted on Hyperforce infrastructure on AWS, then Customer Data will be processed in that infrastructure, as indicated here. If Customer is hosted on Salesforce's own first-party infrastructure, then Customer Data will be processed as indicated above.

·salesforce.com Co., Ltd. Japan Amazon Web Services, Inc.

·United States Hyperforce runs on infrastructure provided by Amazon Web Services, Inc. Currently such infrastructure is hosted on AWS in data centers located in the United States.

·Hosting Provider for B2C Commerce which (may include Managed Runtime).

·Amazon Web Services, Inc.

·United States

·Hosting Provider; CDN for B2C Commerce (which may include Managed Runtime). CloudFront (Amazon Web Services, Inc.)

·Global The Dynamic Imaging Service feature within Digital uses the Amazon CloudFront content delivery network to store and deliver images, which flow through CloudFront and then the customer's CDN.

·Hosting Provider for On-Demand

·Sandboxes.

·Amazon Web Services, Inc.

·United States

·Hosting Provider for B2C Commerce and B2C Commerce Order Management.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Germany

·Hosting Provider for Commerce Cloud

·Einstein. Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Ireland

·Singapore

·CDN for Commerce Cloud Einstein to deliver JavaScript assets to Customer websites CloudFront (Amazon Web Services, Inc.)

·Global

·CDN for B2C Commerce (which may include Managed Runtime), B2C Commerce Order Management, and Commerce Cloud Einstein.

·Cloudflare Global Cloudflare's services are used for purposes that include a content distribution network, a domain name system network, web content optimization, web application firewall, internet protocol reputation filtering, and distributed denial of service attack prevention. 15

·CDN for B2C Commerce (which may include Managed Runtime), B2C Commerce Order Management, and Commerce Cloud Einstein.

·Akamai Technologies, Inc.

·Global Public website content served to website visitors may be stored with Akamai Technologies, Inc., and transmitted by Akamai Technologies, Inc. to website visitors, to expedite transmission.

·Hosting Provider for Commerce

·Marketplace

·Amazon Web Services, Inc.

·Global

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Singapore

·South Korea

·Consumer Goods Cloud (including Trade Promotion Management, Trade Promotion Optimization, and Retail Execution) Also see infrastructure details for Salesforce Services. Consumer Goods Cloud is a configuration of functionality from the Salesforce Services. Some Customers who purchase Consumer Goods Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Some Customers who purchase Consumer Goods Cloud may have access to Channel Revenue Management (ChRM), see infrastructure details for Salesforce Services. Consumer Goods Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Retail Execution feature, Trade Promotion Management, and Trade Promotion Optimization. Customer Amazon Web Services, Inc.

·United States

·Australia

·Germany

·16

·Data is hosted in one of the following regions.

·Additional Hosting Provider for Trade

·Promotion Management.

·Google LLC United States By default AWS is the Hosting Provider for Trade Promotion Management; however, Customers may contact their Account Executive to obtain more information about Trade Promotion Management on Google Cloud Platform as an alternate Hosting Provider, which may be accommodated subject to use case evaluation and availability.

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Provider of generative artificial intelligence services.

·OpenAI, L.L.C. United States In the event of a failover, Customer Data is temporarily re-routed to an endpoint hosted on Microsoft Azure and priority will be given to the region in which Customer's org is provisioned, subject to availability. 17

·CRM Analytics (formerly Tableau CRM) CRM Analytics, which includes Einstein Discovery and Salesforce Data Pipeline, and is often incorporated into certain features of Salesforce Industries Clouds and the Field Service - Einstein 1 Edition SKU, runs on the same infrastructure as the Salesforce Services-see infrastructure details for Salesforce Services. Certain CRM Analytics SKUs, such as Einstein Predictions, and CRM Analytics Plus and related SKUs, include Einstein Prediction Builder. For these SKUs, also see infrastructure details for Einstein Prediction Builder under Salesforce Services. Certain CRM Analytics SKUs that are branded "Intelligence", such as Manufacturing Cloud Intelligence, include certain features of Sales Cloud Einstein as well. For these SKUs, also see infrastructure details for Sales Cloud Einstein.

·Customer 360 Data Manager Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions.

·Salesforce, Inc. United States Kabushiki Kaisha salesforce Japan, also known as Salesforce Japan Co., Ltd.

·Japan

·Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Japan

·Salesforce Data 360 (aka Customer Data Cloud) Salesforce Data 360 includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. (Also applicable to the Services branded as Einstein Personalization, and Customer Data Platform, formerly branded as Salesforce CDP) Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States Customers who have their Salesforce Services org provisioned to the Salesforce-Managed AWS Hyperforce environment hosted in India or a Salesforce Germany India 18

·Japan Services org in the United Arab Emirates may be eligible to have an instance of Salesforce Data 360 provisioned to India. Customers who have their Salesforce Services org provisioned to a Salesforce environment in Indonesia, Japan, Singapore, or South Korea may be eligible to have an instance of Salesforce Data 360 provisioned to Japan. See here and here for further information.

·Australia

·Brazil

·United Kingdom

·Canada

·Switzerland

·Indonesia

·Singapore

·France

·United Arab

·Emirates

·Korea

·Italy

·Sweden

·Israel

·South Africa

·Provider of generative artificial intelligence services.

·OpenAI, L.L.C. United States CDN for all functionality. Akamai Technologies, Inc.

·Global

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·19

·Australia

·Japan

·Brazil

·Singapore

·South Korea

·Database.com See infrastructure details for Salesforce Services.

·Education Cloud

·See infrastructure details for Salesforce Services. Education Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Education Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps.

·Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·20

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Provider of generative artificial intelligence services.

·Einstein Bots

·See infrastructure details for Salesforce Services.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions, depending on where the Customers' Salesforce Services org is hosted.

·Amazon Web Services, Inc.

·United States If a Customer enables NLP functionality for Bots and has Salesforce Services data stored in the EMEA region, then some related Customer Data will be stored in Germany.

·If a Customer enables NLP functionality for Bots and has Salesforce Services data stored in the APAC region, then some related Customer Data will be stored in Japan, India or the United States.

·If a Customer enables NLP functionality for Bots and has Salesforce Services data stored outside of EMEA or APAC, then some related Customer Data will be stored in the United States.

·Australia

·Japan

·Germany

·Ireland

·Brazil Following June 2023, Customer's Einstein Bots data may be processed in one of these specified locations if Customer's Salesforce Services org is in or near the location.

·If a Customer enables NLP functionality for Bots and has Salesforce Services data stored in the EMEA region, then some related Customer Data will be stored in Germany.

·If a Customer enables NLP functionality for Bots and has Salesforce Services data stored in the APAC region, then some related Customer Data will be stored in Japan, India or the United States.

·If a Customer enables NLP functionality for Bots and has Salesforce Services data stored outside of EMEA or Canada France India Singapore South Korea Sweden 22

·United Kingdom APAC, then some related Customer Data will be stored in the United States.

·Einstein Conversation Insights

·See infrastructure details for Salesforce Services. For use of generative AI services with Momentum, see infrastructure details for Einstein Generative AI Services.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in Europe if the Customer's Salesforce Services org is in Europe.

·Amazon Web Services, Inc.

·United States If Customer enables Einstein Conversation Insights, some related Customer Data will be stored in the United States regardless of where Customer's Sales Cloud data is located.

·France

·Germany

·Australia

·Service provider of transcription services. Amazon Web Services, Inc.

·United States

·Provider of meeting recording bot powering Momentum Notetaker Hyperdoc, Inc. dba Recall.ai United States Germany Japan Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·23

·Singapore

·South Korea

·Einstein Conversation Mining

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality. Amazon Web Services, Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·24

·Sweden

·Israel

·South Africa

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Singapore

·South Korea

·Einstein Vision and Language

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality. Amazon Web Services, Inc.

·United States

·Einstein Relationship Insights

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality. Amazon Web Services, Inc.

·United States

·25

·Data source used to process search queries for all functionality.

·Google LLC United States

·Emergency Program Management

·Emergency Program Management is a managed package that runs on top of Salesforce Services-see infrastructure details for Salesforce Services.

·Employee Productivity

·Included in the "Employee Service - Agent" and "IT-Service Center - IT Agent" SKUs. Employee Productivity is a group of managed packages that run on top of the Salesforce Services-See infrastructure details for Salesforce Services.

·Employee Service

·Employee Service runs partially on the Service Cloud infrastructure - see infrastructure details for Salesforce Services. It also includes the following Einstein features: Article Recommendations, Case Wrap-Up, and Case Classification, which run on the Salesforce Services infrastructure and use the following additional sub-processor:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Einstein Case Classification and Einstein Case Wrap-Up.

·Amazon Web Services, Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·26

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·Sweden

·Israel

·South Africa

·Enablement (including Enablement Lite) See infrastructure details for Salesforce Services.

·Enhanced Messaging

·Enhanced Messaging works as an add-on to Sales Cloud and Service Cloud, and uses the Sales Cloud and Service Cloud infrastructure-see infrastructure details for Salesforce Services. For the Real-Time Translations feature within Enhanced Messaging -see infrastructure details for Agentforce Speech Foundations. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Service and hosting provider used for transmission and conversation storage services. Additionally, hosts the Messaging Gateway Server used to process and route inbound and outbound messages.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Germany

·France

·Sweden

·United Kingdom

·27

·Australia

·Japan

·South Korea

·India

·Singapore

·Indonesia

·Italy

·Switzerland

·Israel

·United Arab

·Emirates

·Provider of generative artificial intelligence services.

·OpenAI, L.L.C. United States Applicable if the Agentforce Brand Registration Assistant is enabled.

·Feedback Management

·See infrastructure details for Salesforce Services. Some Customers who purchase Feedback Management may have access to CRM Analytics; for Customers who use this functionality, see infrastructure details for CRM Analytics. 28

·Financial Services Cloud

·Financial Services Cloud (including Digital Origination, f/k/a Digital Lending) see infrastructure details for Salesforce Services. Einstein Activity Capture for Financial Services Cloud-see infrastructure details for Salesforce Services. Financial Services Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Financial Services Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps.

·Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden 29

·India

·Australia

·Japan

·Brazil

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·Flow for Industries (formally Digital Process Automation) See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·30

·United Kingdom

·Government Cloud Plus

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is stored on AWS US-GOV- WEST and AWS-US-GOV-EAST regions.

·Amazon Web Services, Inc.

·United States

·(AWS US-GOV-

·WEST and AWS-

·US-GOV-EAST )

·Salesforce may route the transmission of encrypted Customer Data through various points, including any of its data centers, but the storage and processing of Customer Data will be limited to these regions.

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Used to provide generative intelligence services to Agentforce customers Government Cloud Plus - Defense Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is stored on AWS US-GOV- EAST region.

·Amazon Web Services, Inc.

·United States

·(AWS-US-GOV- EAST) Salesforce may route the transmission of encrypted Customer Data through various points, including any of its data centers, but the storage and processing of Customer Data will be limited to this region. 31

·Health Cloud

·Health Cloud is an extension of the Salesforce Services and a managed package that runs on top of the Salesforce Services-see infrastructure details for Salesforce Services. Health Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Health Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Hosting provider of data processing and storage for Unified Health Scoring feature.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States If a Customer: (a) enables the Unified Health Scoring feature as an add-on to Health Cloud, and (b) has Customer Data used for calculations, assessments, or similar results, that Customer Data will be processed and stored on AWS infrastructure.

·Germany

·Service provider of runtime services used by FHIR APIs powered by MuleSoft. Customer Amazon Web Services, Inc.

·United States If a Customer: (a) enables the FHIR APIs powered by MuleSoft feature as an add-on to Health Cloud, and (b) has Customer Data transmitted using runtime services, Brazil Canada 32

·Data is processed in one of the following regions.

·Australia that Customer Data will be processed on AWS infrastructure.Japan Singapore Germany Ireland United Kingdom Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Provider of generative artificial intelligence services.

·Heroku

·Heroku includes Heroku, Heroku Vibes, and Salesforce Functions, including Salesforce Elastic Services.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in the United States, and, if selected by Customer, also in one of the following regions.

·Amazon Web Services, Inc.

·United States For Customers using the Managed Inference and Agents (MIA) Add-on, Amazon Web Services processes Customer Data as set forth at left, and provisions Customer's selected model(s) in the default region specified in the Add-on's Elements Marketplace listing, unless Customer overrides such default.

·United States

·Australia

·United States

·Ireland

·United States

·Japan

·United States

·Germany

·United States

·Canada

·United States

·United Kingdom

·United States

·Singapore

·United States

·India

·Service provider of customer support tools, including generative artificial intelligence tools.

·Amazon Web Services, Inc.

·United States

·34

·Informatica from Salesforce Intelligent Data Management Cloud Purpose of Processing Sub-processors Locations Additional Details Support services, including technical operations support Informatica LLC Informatica Australia Pty Ltd IS Informatica Software Ltda Salesforce.com Canada Corporation Salesforce.com France SAS Informatica GmbH (after 1st October 2026 Salesforce GmbH), Informatica Business Solutions Private Ltd Informatica Ireland EMEA UC Salesforce Japan Co. Ltd Informatica Software Italia S.r.l., Informatica Data Integration Ibérica, S.L., Informatica Software DMCC and Salesforce UK Limited United States Australia Brazil Canada France Germany India Ireland Japan Italy Spain United Arab Emirates United Kingdom Hosting provider for all functionality and provider of generative artificial intelligence services Amazon Web Services, Inc.

·(AWS) United States Customer's org is hosted on a POD chosen by the Customer or an Account Executive on Customer's behalf when the org is first createdAustralia Canada France 35

·Ireland

·France (disaster recovery) Japan United Kingdom Hosting provider for all functionality and provider of generative artificial intelligence services f Microsoft Corporation (Microsoft Azure and Microsoft Azure OpenAI) United States Customer's org is hosted on a POD chosen by the Customer or an Account Executive on Customer's behalf when the org is first createdAustralia Canada Germany Japan Singapore Switzerland United Arab Emirates Hosting provider and provider of generative artificial intelligence services f Google LLC (GCP) United States Customer's org is hosted on a POD chosen by the Customer or an Account Executive on Customer's behalf when the org is first createdBelgium (AI only) France Germany (disaster recovery) Saudi Arabia 36

·Hosting provider for all functionality Oracle Corp. (OCI) United States Qatar Saudi Arabia (GCP backup) In the event of a failover affecting Intelligent Data Management Cloud on Google Cloud in Saudi Arabia, Customer Data is temporarily re-routed to an endpoint hosted in Saudi Arabia and priority will be given to the region in which Customer's org is provisioned, subject to availability.

·Database for IDMC Cloud Integration Hub

·and MDM SaaS MongoDB Inc. United States Australia Canada France Germany (disaster recovery) Germany Ireland France (disaster recovery) Japan Saudi Arabia Singapore Switzerland 37

·United Arab

·Emirates

·United Kingdom

·User analytics provider Pendo, io, Inc. United States Hosting provider for Data-as-a-Service Email Verification, Global Phone Number Validation and Address Verification Web Services Microsoft Corporation (Microsoft Azure) United States Ireland Data-as-a-Service email verification provider Impressionwise, LLC United States Ireland Sales Engagement (formerly High Velocity Sales) Sales Engagement works as an add-on to Sales Cloud, and uses the Sales Cloud infrastructure-see infrastructure details for Salesforce Services.

·Sales Engagement also includes Salesforce Inbox and Einstein Activity Capture, as well as Einstein Conversational Insights- see infrastructure details for Salesforce Inbox and Einstein Conversation Insights. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in Europe if the Customer's Salesforce Services org is in Europe. Otherwise, Customer Data is hosted in the United States.

·Amazon Web Services, Inc.

·United States

·France

·Germany

·38

·Hosting Provider for Lead Scoring. Amazon Web Services, Inc.

·United States

·Hyperforce Operating Zone (formerly EU Operating Zone) Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Covered Services designated as "Services on the Hyperforce Operating Zone infrastructure" or "HF OZ."

·Amazon Web Services, Inc.

·Germany During signup, Hyperforce OZ Customers can select one of the listed countries to store Customer Data. For Customers who were part of the EU Operating Zone prior to December 17, 2024, Customer Data is stored in Germany.

·Customer Data may also be processed in the European Union. In limited circumstances, Customer Data may be stored and/or processed elsewhere, as described in Exhibit A hereto.

·Switzerland

·Intelligent Form Reader

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider providing optical character recognition (OCR) for all functionality.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Australia

·Canada

·France

·Germany

·Ireland

·India

·United Kingdom

·39

·Life Sciences Cloud

·Life Sciences Cloud is an extension of the Salesforce Services-see infrastructure details for Salesforce Services. Life Sciences Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Service provider of runtime services used by FHIR APIs powered by MuleSoft. Customer Data is processed in one of the following regions.

·Amazon Web Services, Inc.

·United States If a Customer: (a) enables the FHIR APIs powered by MuleSoft feature as an add-on to Life Sciences Cloud, and (b) has Customer Data transmitted using runtime services, that Customer Data will be processed on AWS infrastructure.

·Brazil

·Canada

·Australia

·Japan

·Singapore

·Germany

·40

·Ireland

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Provider of generative artificial intelligence services.

·LiveMessage

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in the United States (by default), or, if selected by the Customer, in Germany or Ireland.

·Amazon Web Services, Inc.

·United States

·Germany

·Ireland

·41

·Loyalty Management

·Loyalty Management is an extension of the Salesforce Services and a managed package that runs on top of Salesforce Services-see infrastructure details for Salesforce Services. Loyalty Management also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features.

·Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Provider of generative artificial intelligence services.

·m3ter Sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting provider for online Services.

·Customer Data is stored in this region.

·Amazon Web Services, Inc.

·United States

·Hosting provider for databases Clickhouse United States Manufacturing Cloud See infrastructure details for Salesforce Services. Manufacturing Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Manufacturing Cloud have access to Salesforce Maps Lite;

·for Customers who use this functionality, see infrastructure details for Salesforce Maps. Some Customers who purchase Manufacturing Cloud may have access to Channel Revenue Management (ChRM), see infrastructure details for Salesforce Services. Manufacturing Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features.

·Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·43

·Germany

·Sweden

·United Kingdom

·Service provider of runtime services used by Manufacturing APIs powered by MuleSoft.

·Customer Data is processed in one of the following regions.

·Amazon Web Services, Inc.

·United States If a Customer: (a) enables the Manufacturing APIs powered by MuleSoft feature as an add-on to Manufacturing Cloud, and (b) has Customer Data transmitted using runtime services, that Customer Data will be processed on AWS infrastructure.

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil 44

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·Marketing Cloud: MC Advertising MC Advertising (including Advertising Audiences and Journey Builder Advertising) interoperates with and runs partially on Marketing Cloud Engagement infrastructure. See infrastructure details for Marketing Cloud: Marketing Cloud Engagement Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in the United States for Customers with instances on first- party infrastructure, and primarily in Europe for a limited number of Customers that have consented to their instance being hosted on Hyperforce.

·Salesforce, Inc. United States Applicable only in as much as Ad Studio interoperates with and runs partially on Marketing Cloud Engagement infrastructure.

·Amazon Web Services, Inc.

·United States If the Customer has consented to their data being hosted on Hyperforce, Customer Data will be primarily hosted on Salesforce infrastructure in Germany, but certain ancillary Customer Data will also be hosted on Salesforce, Inc., first-party infrastructure in the United States or Amazon Web Services, Inc. infrastructure in the United States Salesforce, Inc.

·SFDC Germany Data

·Center GmbH

·United States

·Germany

·Marketing Cloud: Intelligence and Intelligence Data Pipelines (formerly Datorama) Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data will be hosted on one of the following hosting providers in one of the Amazon Web Services, Inc.

·United States If a Customer is using the Marketing Cloud connector in Intelligence to import data from the Customer's Marketing Cloud Engagement account into the Germany Ireland 45

·following regions. Hosting Customer Data on AWS in the United States is the default sub- processor and region, but Customers may request Azure and/or an alternate hosting location instead.

·Microsoft Corporation

·(Microsoft Azure) United States Customer's Intelligence account, the data will temporarily be stored in an AWS S3 bucket in the same region as the Customer's Marketing Cloud Engagement account before being stored in the Customer's Intelligence account.

·Additionally, if a Customer is hosted on Azure, limited account information, such as admin contact details and Intelligence products purchased by the Customer, used for provisioning accounts may still be processed, but not stored, in AWS.

·Ireland

·Google LLC United States Only applicable to Customers that use Microsoft Azure Belgium Denmark Finland Ireland The Netherlands CDN for all functionality Akamai Technologies, Inc.

·Global

·Marketing Cloud: Intelligence Reports for Engagement (formerly Datorama Reports) Unless your Order Form for the Marketing Cloud Engagement Services expressly excludes Intelligence Reports, Intelligence Reports is included with a purchase of the Marketing Cloud Engagement Services and can be accessed through the Marketing Cloud Engagement Services. Intelligence Reports also runs on the Intelligence infrastructure, unless provisioned for Marketing Cloud Engagement on AWS - India, Japan, or Canada (Hyperforce) in which case Customer Data will be stored and processed in the Marketing Cloud Engagement infrastructure and Salesforce Data 360 infrastructure. Accordingly, see infrastructure details for Marketing Cloud: Marketing Cloud Engagement Services and Salesforce Data 360.

·Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted on one of the Amazon Web Services, Inc.

·United States Note: The Customer Data for reporting and the reporting application for Intelligence Reports for Germany 46

·following sub-processors in one of the following regions. AWS is the default hosting provider, but Azure may be available upon request in the future as an alternative to AWS.

·Ireland Engagement on AWS - India, Australia, Japan, and Canada (Hyperforce) are natively supported on the Salesforce Data 360 infrastructure.

·Japan

·Australia

·Microsoft Corporation

·(Microsoft Azure) United States Ireland CDN of Intelligence Reports for Engagement. Akamai Technologies, Inc.

·Global

·Marketing Cloud: Marketing Cloud Engagement Marketing Cloud Engagement includes Audience Builder, Automation Studio, Content Builder, Email Studio, Marketing Cloud Engagement, Journey Builder, Mobile Studio, and Web Studio.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality ● Audience Builder, ● Automation Studio, Content Builder, ● Email Studio, ● Marketing Cloud Engagement, ● Journey Builder, ● Mobile Studio, and Web Studio.

·Customer Data is hosted in one of the following regions using both Salesforce and Google infrastructure.

·If the Customer is eligible to be hosted on Hyperforce and has requested to have their Salesforce, Inc. United States Customers who purchased Marketing Cloud Engagement on or before November 28, 2019, have Customer Data stored in the United States.

·In the event of a disaster in an EMEA facility, Customer Data will be restored to an Marketing Cloud Engagement Salesforce, Inc., facility located within the United States.

·SFDC France Data Centre

·Sarl

·SFDC Germany Data

·Center GmbH

·France

·Germany

·Google LLC United States

·Belgium

·Germany

·Amazon Web Services, Inc.

·United States Hyperforce runs on infrastructure provided by Amazon Web Services, Inc. Currently such infrastructure isIndia 47

·Customer Data hosted on Hyperforce, Customer Data will be hosted in one of the following regions on AWS.

·Australia hosted on AWS in data centers located in the United States, India, Australia,Japan.Japan Canada CDN for all functionality Akamai Technologies, Inc.

·Global

·Cloudfront (on Amazon Web Services, Inc.)

·Global

·Customer Service Provider Softvision, LLC, a subsidiary of Cognizant Technology Solutions U.S. Corp Romania URL Link Shortening for Journey Builder Amazon Web Services, Inc.

·United States Customers may opt in to have URL links shortened by AWS, which would involve processing of Customer's original URL links and/or Subscriber IDs.

·India

·Japan

·Australia

·Germany

·Brazil

·England

·Canada

·Switzerland

·Service provider for SMS [/MMS] processing and routing services Customer Data is routed through one of the following regions. Region is determined by the location of Customer's instance on first- party infrastructure or Hyperforce.

·Amazon Web Services, Inc.

·United States

·Germany

·Switzerland

·Canada

·United Kingdom

·Brazil

·48

·Japan

·Indonesia

·Australia

·Singapore

·India

·France

·United Arab

·Emirates

·South Korea

·Italy

·Sweden

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·Canada

·India

·Australia

·Japan

·Marketing Cloud: Marketing Cloud Engagement+ Marketing Cloud Engagement+ incorporates features from each of Marketing Cloud: Marketing Cloud Engagement Services and Marketing Cloud Next, including features that rely on the additional infrastructures used by such services and features that may use the Einstein Generative AI Services. Please see the infrastructure details for these features. 49

·Marketing Cloud Next (formerly Marketing Cloud Growth Edition and Marketing Cloud Advanced Edition) Marketing Cloud Next runs partially on Data, Sales, Experience, and Service Cloud infrastructures - see infrastructure details for Data Cloud and Salesforce Services, and relies on data from, and writes data to, Data Cloud infrastructure. Marketing Cloud Next also incorporates features that run on the following infrastructures: Marketing Cloud: Marketing Cloud Engagement Services, Einstein Generative AI Services, Marketing Cloud:

·Marketing Cloud Einstein, Privacy Center, and Tableau Next. Marketing Cloud Next may also interoperate with features from Enhanced Messaging.

·Please see infrastructure details for each of these features.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States Mobile App Messaging is available in all regions listed here, except the United Arab Emirates.

·Germany

·Switzerland

·Canada

·United Kingdom

·Brazil

·Japan

·Indonesia

·Australia

·Singapore

·India

·France

·United Arab

·Emirates

·South Korea

·Italy

·Sweden

·Israel

·50

·South Africa

·CDN for all functionality. Akamai Technologies, Inc.

·Global

·CDN for Marketing Cloud Next features that leverage My Domains (including Enhanced Domains and my.site.com sites). This includes Landing Pages, Forms, Reference Pages and other features that may publish external websites.

·Cloudflare Global Salesforce leverages CDNs to optimize page load times and site performance. Traffic will flow through the CDN's network of edge servers, which optimizes routing and caches publicly cacheable content.

·Customers can opt-out of leveraging Cloudflare CDN for this use case by contacting Support, though opting out may affect performance and certain functionality.

·Learn More

·Hosting and processing provider for RCS messaging.

·Amazon Web Services, Inc.

·United States RCS is available to Marketing Cloud Next customers in certain regions.

·Customer Data processed by Salesforce will be processed in the regions listed here.

·Germany

·United Kingdom

·Brazil

·India

·France

·51

·Marketing Cloud: Marketing Intelligence Unless your Order Form for the Marketing Cloud expressly excludes Marketing Intelligence Reports, Marketing Intelligence Reports is included with and/or accessed through a purchase of the Marketing Cloud Engagement+, Marketing Cloud Intelligence+, Marketing Cloud Next Services.

·Marketing Intelligence runs on Marketing Cloud on AWS (Hyperforce) and Salesforce Services, and relies on data from Salesforce Data 360 (formerly, Data Cloud). It incorporates components of Data 360, Agentforce, Tableau Next, and Einstein AI. Customer Data will be stored and processed in the Marketing Cloud on AWS infrastructure and Data 360 infrastructure. Accordingly, see infrastructure details for Data 360 and Marketing Cloud Advanced and Growth Editions. Note: Marketing Intelligence and Marketing Intelligence Reports are distinct product offerings than Marketing Cloud: Intelligence Reports for Engagement (formerly, "Datorama Reports") and Marketing Cloud: Intelligence and Intelligence Data Pipelines (formerly, "Datorama").

·Additional sub-processor(s) for this Service are:

·Hosting Provider for all functionality.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States Customers who have their Salesforce Services org provisioned to the Salesforce-Managed AWS Hyperforce environment hosted in India or a Salesforce Services org in the United Arab Emirates may be eligible to have an instance of Salesforce Data 360 provisioned to India. Customers who have their Salesforce Services org provisioned to a Salesforce environment in Indonesia, Japan, Singapore, or South Korea may be eligible to have an instance of Salesforce Data 360 provisioned to Japan. See here and here for further information.

·Germany

·Switzerland

·Canada

·United Kingdom

·Brazil

·Japan

·Indonesia

·Australia

·Singapore

·India

·France

·United Arab

·Emirates

·South Korea

·52

·Italy

·Sweden

·Marketing Cloud: Personalization (formerly Interaction Studio) Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Marketing Cloud Personalization. Customer Data is hosted in one of the following regions Amazon Web Services, Inc.

·United States

·Australia Customers based in the APAC region who signed up for Marketing Cloud Personalization before November 1, 2020, may have Customer Data stored in the United States.

·Germany

·Marketing Cloud: Marketing Cloud Einstein Marketing Cloud Einstein functionality relies on data from, and writes data to, Marketing Cloud Engagement Infrastructure. See infrastructure details for Marketing Cloud: Marketing Cloud Engagement Services. Marketing Cloud Engagement Customers provisioned to AWS India (Hyperforce) will map to AWS - Ireland and/or Germany as described below. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for the following Marketing Cloud Einstein features:

·● Behavioral Triggers ● Einstein Email Recommendations ● Einstein Web Recommendations ● Personalization Builder ● Predictive Email Amazon Web Services, Inc.

·United States

·Australia

·Canada

·53

·● Predictive Intelligence ● Predictive Web ● Web Personalization.

·Customer Data is hosted in one of the following regions Ireland Hosting Provider for the following Marketing Cloud Einstein features:

·● Einstein Content Selection ● Einstein Content Tagging ● Einstein Copy Insights ● Einstein Engagement Frequency ● Engagement Scoring for Email ● Einstein Engagement Scoring for Mobile, Einstein Messaging Insights ● and Send Time Optimization.

·Customer Data is hosted in one of the following regions Amazon Web Services, Inc.

·United States

·Australia

·Ireland

·Provider of generative artificial intelligence features OpenAI, L.L.C. United States Processor for Marketing Cloud Einstein feature: Einstein Content Tagging Google LLC Global Used only for Einstein Content Tagging. Data may be hosted in any location provided by Google, listed at Global Locations - Regions Zones.

·Marketing Cloud: Social Studio Social Studio email functionality relies on Marketing Cloud Engagement. See infrastructure details for Marketing Cloud: Marketing Cloud Engagement Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality salesforce.com Canada Corporation Canada 54

·Global

·Messaging

·Messaging works as an add-on to Sales Cloud and Service Cloud, and uses the Sales Cloud and Service Cloud infrastructure-see infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Messaging Gateway Server used to process and route inbound and outbound messages.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Germany

·France

·Sweden

·United Kingdom

·Australia

·Japan

·South Korea

·India

·Singapore

·Indonesia

·Italy

·Switzerland

·Israel

·United Arab

·Emirates

·55

·Provider of generative artificial intelligence services.

·OpenAI, L.L.C. United States Applicable if the Agentforce Brand Registration Assistant is enabled.

·Enhanced Chat (formerly Messaging for In-App and Web) Enhanced Chat (formerly Messaging for In-App and Web) works as an add-on to Service Cloud, and uses the Service Cloud infrastructure-see infrastructure details for Salesforce Services. For the Real-Time Translations and Agentforce Voice features within Enhanced Chat -see infrastructure details for Agentforce Speech Foundations. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Service and hosting provider used for transmission and conversation storage services.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Germany

·France

·Sweden

·United Kingdom

·Australia

·Japan

·South Korea

·India

·Singapore

·Indonesia

·Italy

·Switzerland

·Israel

·United Arab

·Emirates

·56

·MuleSoft: MuleSoft Anypoint Platform, MuleSoft Composer, and MuleSoft Robotic Process Automation (RPA) MuleSoft includes the MuleSoft Anypoint Platform, MuleSoft Composer, and MuleSoft Robotic Process Automation (RPA). MuleSoft also includes features that may use the Einstein Generative AI Services; please see the infrastructure details for these features. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for runtime services for all functionality. Administrators can set the default region for runtime services on the Anypoint Platform Organization tab in Account Settings, but that region can be adjusted when the application is deployed, if necessary.

·Amazon Web Services, Inc.

·United States If Anypoint MQ Customers choose to enable Cross- Region Failover for their queue(s), in the event of a failover Customer Data is temporarily re-routed as follows:

·AMER:

·● us-west-2 (Oregon) is re-routed to ca-central-1 (Montreal, Canada) ● ca-central-1 (Montreal, Canada) is re-routed to us-east-1 (N.Virginia) ● us-east-1 (N.Virginia) is re-routed to us-east-2 (Ohio) ● us-east-2 (Ohio) is re-routed to us-west-2 (Oregon) Europe Prod-US Control Plane ● eu-west-1 (Ireland) is re-routed to eu-west-2 (London) ● eu-west-2 (London) is re-routed to eu-west-1 (Ireland) Prod-EU Control Plane ● eu-central-1 (Frankfurt) is re-routed to eu- west-1 (Ireland) ● eu-west-1 (Ireland) is re-routed to eu-central-1 (Frankfurt) Australia Brazil Canada France Germany India Ireland Japan Singapore United Kingdom Hosting Provider for control plane services for all functionality. Customer Data is stored in one of the following regions.

·Amazon Web Services, Inc.

·United States

·57

·Asia Pacific:

·● ap-southeast-1 (Singapore) is re-routed to ap- northeast-1 (Tokyo) ● ap-southeast-2 (Sydney) is re-routed to ap- southeast-1 (Singapore) ● ap-northeast-1 (Tokyo) is re-routed to ap- southeast-2 (Sydney) Australia Germany Customer Data is stored in Germany and backed up in Ireland Ireland India CDN for all functionality. Cloudfront (on Amazon Web Services, Inc.)

·Global

·Customer Support service provider for Anypoint Monitoring.

·InfluxData Inc. United States United Kingdom Email service provider for all functionality. Mailgun Technologies, Inc.

·United States

·Log aggregator for all functionality. Sumo Logic, Inc. United States User analytics provider for MuleSoft services.

·Segment.io, Inc. United States Provider of generative artificial intelligence features.

·OpenAI, L.L.C. United States Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·58

·India

·Australia

·Japan

·Net Zero Cloud (formerly Sustainability Cloud) Net Zero Cloud is a configuration of the Salesforce Services--see infrastructure details for Salesforce Services. Net Zero Cloud also includes features that may use the Einstein Generative AI Services; please see the infrastructure details for these features. Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France 59

·Germany

·Sweden

·India

·Australia

·Japan

·Brazil

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·Marketing Cloud Account Engagement

·See also infrastructure details for Salesforce Services, Salesforce Data 360, Marketing Cloud Engagement, Marketing Cloud Next, and Tableau Next.

·Marketing Cloud Account Engagement also includes features that may use the Einstein Generative AI Services.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality. Amazon Web Services, Inc.

·United States

·Hosting Provider for Marketing Cloud

·Account Engagement services including Einstein Send Time Optimization and Einstein Engagement Frequency.

·Amazon Web Services, Inc.

·United States

·Ireland

·Hosting Provider for Marketing Cloud

·Account Engagement Lead Scoring.

·Amazon Web Services, Inc.

·United States

·CDN for all functionality. CloudFront (Amazon Web Services, Inc.)

·Global

·60

·Provider of generative artificial intelligence features OpenAI, L.L.C. United States In the event of a failover, Customer Data is temporarily re-routed to an endpoint hosted on Microsoft Azure and priority will be given to the region in which Customer's org is provisioned, subject to availability.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Hosting Provider for all generative artificial intelligence features Amazon Web Services, Inc.

·United States

·Germany

·India

·61

·Nonprofit Cloud and Nonprofit Cloud for Grantmaking

·Some Customers who purchase Nonprofit Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia 62

·Japan

·Brazil

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·Privacy Center

·See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Service Provider used for transmission services for all functionality. Customer Data will be transmitted within one of the following regions.

·Heroku, Inc. (on Amazon Web Services, Inc.)* United States *Heroku is only a sub-processor for Privacy Center Customers who have purchased the Heroku Data Bridge SKU in connection with their purchase of Privacy Center.

·Germany

·France

·Australia

·Japan

·Hosting Provider for retention store functionality of Privacy Center.

·Amazon Web Services, Inc.

·United States Does not apply to the SKU entitled "Customer 360 Privacy Center" Australia Canada France Germany India 63

·Italy

·Japan

·Singapore

·Sweden

·Switzerland

·United Kingdom

·PredictSpring

·Sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for on-line Services Amazon Web Services, Inc.

·United States

·Process Compliance Navigator

·Process Compliance Navigator is an add-on to the Salesforce Services--see infrastructure details for Salesforce Services. 64

·Public Sector Solutions

·Public Sector Solutions is a configuration of the Salesforce Services--see infrastructure details for Salesforce Services. Public Sector Solution also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Public Sector Solutions have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Additional sub-processors for this Service are:

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India 65

·Australia

·Japan

·Brazil

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·Qualified

·Purpose of Processing Sub-processors Locations Additional Details Provider of generative artificial intelligence services.

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Batch Processing via Azure OpenAI utilizes global endpoints, geo-aware routing rules are not supported.

·For more details see Geo-Aware Routing for OpenAI and Azure OpenAI Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom 66

·Korea

·Poland

·South Africa

·Norway

·Provider of generative artificial intelligence services.

·Google LLC United States If Customer Data is routed to an LLM provider via an endpoint hosted on Google the disclosed region closest to Customer's Salesforce Org applies. In the event of a failover, Customer Data is temporarily re-routed through an endpoint hosted on Google in the US.

·Germany

·Japan

·Australia

·Brazil

·India

·The Netherlands

·Provider of generative artificial intelligence services.

·Amazon Web Services, Inc.

·United States If Customer Data is routed to an LLM provider via an endpoint hosted on Amazon Web Services the disclosed region closest to Customer's Salesforce Org applies. In the event of a failover, Customer Data is temporarily re- routed through an endpoint hosted on Amazon Web Services in the US.

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·Sweden

·67

·Israel

·South Africa

·Hosting Provider for all functionality Amazon Web Services, Inc.

·United States

·Hosting provider for all functionality and provider of data analytics services ClickHouse, Inc. United States CDN for Qualified Services Cloudflare, Inc. Global Cloudflare's services are used for purposes that include a content distribution network, a domain name system network, web content optimization, web application firewall, internet protocol reputation filtering, and distributed denial of service attack prevention Provider of log management metrics reports Datadog, Inc. United States Provider of error reporting services Functional Software, Inc.

·d/b/a Sentry United States Provider of AI avatars Tavus Inc. United States Provider of web real-time communication (WebRTC) services Daily, Co. United States Provider of data enrichment services Demandbase, Inc. United States Quip Quip includes Services formerly branded as Salesforce Anywhere.

·Purpose of Processing Sub-processors Locations Additional Details Hosting provider for all functionality. Amazon Web Services, Inc.

·United States

·Referral Marketing

·See infrastructure details for Salesforce Services. Referral Marketing also includes some Marketing Cloud functionality (i.e. Journey Builder and MC Engagement). Therefore, see also infrastructure details for Marketing Cloud. 68

·Retail Cloud POS

·Sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for online Services (Hyperforce infrastructure). Customer Data is hosted in the following region.

·Amazon Web Services, Inc.

·United States

·Revenue Cloud

·Revenue Cloud includes Revenue Cloud Growth, Revenue Cloud Advanced, and Revenue Cloud Billing. Revenue Cloud Advanced is formerly Revenue Lifecycle Management. For Customers who purchase Revenue Cloud, see infrastructure details for Salesforce Services. Customers who purchase Revenue Cloud Advanced also have access to Salesforce Contracts, PDF generation functionality through Field Service, and product and quoteline import functionality through Data Cloud. For Customers who use these functionalities, see infrastructure details for Salesforce Contracts, Field Service PDF generation, and Data Cloud, respectively. Additional subprocessors for these services are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Advanced Configurator Amazon Web Services, Inc.

·Australia

·Brazil

·Canada

·France

·Germany

·India

·Indonesia

·Israel

·Italy

·69

·Japan

·Singapore

·South Korea

·Sweden

·Switzerland

·United Arab

·Emirates

·United Kingdom

·United States

·Safety Cloud

·See infrastructure details for Salesforce Services.

·Sales Cloud Einstein

·Sales Cloud Einstein works as an add-on to Sales Cloud, and uses the Sales Cloud infrastructure. Sales Cloud Einstein also includes all Salesforce Inbox Functionality. Therefore, also see infrastructure details for Salesforce Services and infrastructure details for Salesforce Inbox. Additional sub- processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Sales Cloud Einstein Account Insights, Einstein Automated Contacts, Einstein Forecasting, Opportunity Insights, Lead Scoring, Opportunity scoring, and Account Intelligence.

·Amazon Web Services, Inc.

·United States

·70

·Salesforce Contracts

·See infrastructure details for Salesforce Services. Salesforce Contracts also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Additional sub-processors for this Service are:

·Amazon Web

·Services, Inc.

·United States

·Switzerland

·Brazil

·Canada

·Australia

·India

·Indonesia

·Israel

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden 71

·India

·Australia

·Japan

·Brazil

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·Salesforce CPQ and Salesforce Billing (together formally branded as Salesforce Quote-to-Cash) See infrastructure details for Salesforce Services. Salesforce CPQ is a managed package that runs on top of the Salesforce Services. Additional sub- processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Quote calculation service provider for all functionality. Customer Data will be processed in one of the following regions.

·Heroku, Inc. (on Amazon Web Services) United States Germany Ireland Australia Japan Hosting Provider of document generation processing for Server-Side Document Generation feature. Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Australia

·India

·72

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Service provider providing invoice quote PDF generator AppExtremes, LLC dba Conga United States Sales Enablement (formerly branded as myTrailhead) Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality Amazon Web Services, Inc.

·United States

·Heroku, Inc. (on Amazon Web Services, Inc.)

·United States

·CDN for all functionality Fastly, Inc. Global Service provider for search functionality.

·Customer Data will be processed in one of the following regions.

·Coveo United States

·Canada

·France

·Germany

·Ireland

·Italy

·The Netherlands

·United Kingdom

·Amazon Web Services, Inc.

·United States

·73

·Salesforce Inbox

·See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data will be hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·France Customers, who activated Salesforce Inbox before May 8, 2017, may have Customer Data stored in the United States.Germany Salesforce Maps (including Maps Lite) and Salesforce Sales Planning See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer Data will be hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Germany

·Service Provider used to capture usage data and feedback for all functionality.

·Pendo.io, Inc. United States Salesforce Order Management See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Service provider for versions of Order Management released on or after February 19, 2020. Customer Data will be hosted in one of the following regions.

·Heroku, Inc. (on Amazon Web Services, Inc.)

·United States

·Germany

·Australia

·Japan

·74

·Salesforce Private Connect

·See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting provider used for transmission services for all functionality.

·Amazon Web Services, Inc.

·United States

·Australia

·Brazil

·Canada

·France

·Germany

·India

·Indonesia

·Israel

·Italy

·Japan

·Singapore

·South Korea

·Sweden

·Switzerland

·United Arab

·Emirates

·United Kingdom

·75

·Salesforce.org Elevate Purpose of Processing Sub-processors Locations Additional Details Hosting Provider and non-storage infrastructure support for all functionality.

·(Also used for Payment Processing and Management for Salesforce.org Elevate) Amazon Web Services, Inc.

·United States

·Hosting Provider for all functionality. Heroku, Inc. (on Amazon Web Services, Inc.)

·United States

·CDN for all functionality. Fastly, Inc. Global Cloudinary Global Email service provider for all functionality. Mailgun Technologies, Inc.

·United States

·Salesforce.org Salesforce.org Services are managed packages that run on top of the Salesforce Services; for Accounting Subledger, Admissions Connect, foundationConnect (provisioned on or after August 19, 2019), Grants Management, Nonprofit Cloud Case Management3, Salesforce.org Insights Platform: Data Integrity, and Student Success Hub (formerly Salesforce Advisor Link), as well as Services, including Education Cloud, Nonprofit Cloud, and Nonprofit Cloud for Grantmaking that are built directly into the Salesforce platform; see infrastructure details for Salesforce Services.

·Salesforce.org Services also include features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Admissions Connect or Grants Management have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Additional sub-processors for these Services are:

·Purpose of Processing Sub-processors Locations Additional Details Service Provider used for transmission services for Student Success Hub (including Heroku, Inc. (on Amazon Web Services, Inc.)

·United States

33 References to Nonprofit Cloud Case Management refer to the managed package. 76

·the former Salesforce Advisor Link) and Marketing Cloud Engagement for Nonprofits (formerly Marketing Cloud for Nonprofits).

·Service Provider used for transmission services for Insights Platform. Customer Data will be transmitted in one of the following regions using both AWS and Heroku.

·Amazon Web Services, Inc.

·United States

·Germany

·Heroku, Inc. (on Amazon Web Services, Inc.

·United States

·Germany

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom 77

·Provider of generative artificial intelligence services.

·Salesforce Services4 Salesforce Services are Agentforce Contact Center, Chatter, Database.com, Experience Cloud (formerly Community Cloud), Lightning Platform (including Force.com and Salesforce Shield), Sales Cloud, Service Cloud, and Site.com. The same infrastructure and sub-processors are used to host B2B Commerce, B2B Commerce on Lightning Experience, Channel Revenue Management (ChRM), IoT Explorer, Agentforce IT Service5 (except for the CMDB component), and components of Tableau Next.

·Some Customers who purchase the Salesforce Services have access to Social Customer Service, Salesforce Data 360, Einstein Bots, Einstein Conversation Insights, Sales Cloud Einstein, Agentforce Voice, and Sales Engagement. For Customers who use this functionality, see infrastructure details for Social Studio, infrastructure details for Salesforce Data 360, infrastructure details for Einstein Conversations Insights, infrastructure for Sales Cloud Einstein, infrastructure details for Agentforce Speech Foundations, and infrastructure details for Sales Engagement accordingly.

·Some Customers who purchase the Salesforce Services have access to Salesforce Maps Lite. For Customers who use this functionality, see infrastructure details for Salesforce Maps. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Customer's org is hosted on either AWS or Salesforce infrastructure in one of the following regions, which is chosen by the Customer or an Account Executive when the org is first created. Learn More.

·SFDC Sweden AB

·SFDC Netherlands B.V.

·Sweden

·The Netherlands

·Salesforce, Inc. United States Kabushiki Kaisha salesforce Japan, also Japan 4 Salesforce offers many packages that include some or all of the features in the Salesforce Services. These packages will link to this section, and may include some or all of the features listed below. See Where is my Salesforce Instance Located?

55 For the CMDB component of Agentforce IT Service, see please Agentforce IT Service section. 78

·known as Salesforce Japan Co., Ltd.

·Amazon Web Services, Inc.

·Australia Salesforce Advanced Cross-Region Continuity (ACRC) is supported in the European Union, India, Israel, Japan, the United Kingdom, and the United States. In the EU, Germany is the primary region, and France is the secondary, failover region. For customers in Israel, the secondary, failover region is Sweden. For customers in the United Kingdom, France is the secondary, failover region.

·Brazil

·Canada

·France

·Germany

·India

·Indonesia

·Israel

·Italy

·Japan

·Singapore

·South Africa

·South Korea

·Sweden

·Switzerland

·United Arab

·Emirates

·United Kingdom

·United States

·79

·Certain features are available in every Hyperforce region, but require hosting and processing data on Amazon Web Services, including :

·● Mail transfer agent functionality ● Einstein Case Classification and Einstein Case Wrap-Up ● Scale Test (including Scale Center) ● PDF export functionality, and CRM Analytics integration with Slack (using the Headless Browser Service) ● PDFs generation for Salesforce Field Service ● The MCP Server Amazon Web Services, Inc.

·Australia If your org is hosted in Salesforce 1P infrastructure, these features will be provided by AWS within the same region, although Customers whose data is hosted in Sweden and the Netherlands may have their data processed or stored in other AWS locations within the EU.

·A mail transfer agent (MTA) is responsible for routing and delivering email messages between servers. AWS may provide MTA functionality for the Salesforce Services.

·Brazil

·Canada

·France

·Germany

·India

·Indonesia

·Israel

·Italy

·Japan

·Singapore

·South Korea

·Sweden

·Switzerland

·United Arab

·Emirates

·United Kingdom

·United States

·Hosting Provider for Account Intelligence

·features Account News, Lightning News, Account Logos, and Account Autofill, and Einstein Opportunity Scoring, and Einstein Deal Insights.

·Amazon Web Services, Inc.

·United States Account Intelligence feature is on by default for all new Customers.

·Hosting Provider for Backup and Recover, Archive, and Discover Amazon Web Services, Inc.

·United States

·80

·Canada Customers based in India and Japan who purchase Archive on or after March 8, 2026 will be routed to India and Japan, respectively.

·United Kingdom

·Germany

·Australia

·Singapore

·Japan

·India

·Backup and Recover Next Amazon Web Services, Inc.

·Japan

·India

·Hosting provider for Einstein Prediction Builder, Einstein for Nonprofits, and Einstein Recommendation Builder. Customer Data is hosted in Europe for Customers with their Salesforce Services org in Europe.

·Otherwise, Customer Data is hosted in the United States.

·Amazon Web Services, Inc.

·United States

·Germany

·Hosting Provider for Einstein Activity

·Capture. Customer Data is hosted in Europe for Customers with their Salesforce Services org in Europe. Otherwise, Customer Data is hosted in the United States.

·Amazon Web Services, Inc.

·United States

·France

·Germany

·81

·Hosting provider for Einstein Article Recommendations-if Customer has enabled customized models for Article Recommendations. Customer Data is hosted in one of the following regions depending on the location of the Customers Salesforce Services org.

·Amazon Web Services, Inc.

·United States

·Germany

·Ireland

·United Kingdom

·Canada

·Australia

·Japan

·Customers who purchased Einstein Article Recommendations on or before April 30, 2025 and based in the APAC region may also have data stored on Amazon Web Services infrastructure in the United States or India in addition to their region.

·Hosting Provider and Service Provider to support scheduling and optimization functionality for Salesforce Field Service.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Australia

·Germany

·Canada

·Hosting Provider and Service Provider used to calculate routes for Salesforce Field Service. Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Australia

·Germany

·Canada

·CDN for Experience Cloud (formerly Community Cloud), Sales Cloud, and Service Amazon Web Services, Inc.

·Global

·Salesforce leverages CDNs to optimize page load times and site performance. Traffic will flow through the CDN's network of edge servers, which optimizes routing and caches publicly cacheable content.

·Akamai

·82

·Cloud, for Customers with orgs that use the My Domain feature.6 Cloudflare Customers can opt-out of leveraging CDNs for this use case by contacting Support, though opting out may slightly affect performance. Learn More CDN for Experience Cloud, D2C Commerce (formerly B2B2C Commerce), B2B Commerce, B2B Commerce on Lightning Experience, DXP, CMS, and My Domain (including Enhanced Domains and my.site.com sites).

·Akamai Technologies, Inc.

·Global

·Customers can opt-out of leveraging CDNs for this use case by contacting Support, though opting out may slightly affect performance. Learn More.

·Cloudflare

·CDN for Lightning Experience Cloudfront (Amazon Web Services, Inc.)

·Global When enabled, the Amazon CloudFront CDN ("Cloudfront") optimizes page load times and site performance for Lightning domains by routing static resources and other cacheable webpage content through CloudFront's network of edge servers.

·Customers can opt out by contacting Support, though opting out may slightly affect performance.

·Lightning Experience

·Learn more about CloudFront for Lightning Experience.

·CloudFront can serve the domain with a dedicated HTTPS certificate.

66 The My Domain feature includes my.site.com sites and sites using Enhanced Domains. 83

·CDN for all functionality Cloudflare Global If enabled by Customer, Cloudflare helps optimize content delivery.

·Salesforce Services

·Salesforce Edge: Hosting provider for Availability zones/Edge servers for all functionality Amazon Web Services, Inc.

·Global Customer Data may be transmitted through any AWS Salesforce Edge region to provide better and faster service response time depending, for example, on the location of Users. Learn more.

·Service Provider used for transmission services for Sales Cloud Einstein Readiness Assessor, Service Cloud Einstein Readiness Assessor, Revenue Intelligence Assessor, and ECI Readiness Assessor.

·Heroku, Inc. (on Amazon Web Services, Inc.)

·United States

·Service provider used for transmission services for Microsoft Teams Integration.

·Customer Data is transmitted in one of the following regions.

·Amazon Web Services, Inc.

·United States Microsoft Teams Integration is a feature available to Sales Cloud ,Service Cloud, and Tableau Cloud.

·Microsoft Corporation

·(Microsoft Azure) United States Service Provider used for transmission services for Salesforce Slack Integration Proxy.

·Amazon Web Services, Inc.

·United States

·Service Provider used for transmission services for Pub/Sub API.

·Amazon Web Services, Inc.

·United States The Pub/Sub API is available for use with Platform Events, Change Data Capture, and Real Time Event Monitoring.Germany Australia Brazil Canada 84

·India

·Japan

·United Kingdom

·Service Provider used for transmission services for Event Relay.

·Amazon Web Services, Inc.

·United States Event Relay uses AWS to stream events between Customer's Salesforce and Amazon Web Services instances.

·Germany

·Service Provider used for processing for DevOps Center.

·Amazon Web Services, Inc.

·United States AWS is used to coordinate interactions between the source control system and the Salesforce environment(s) composing the deployment pipeline.

·Service Provider used for processing for DX Inspector.

·Amazon Web Services, Inc.

·United States

·Service Provider used for processing and storage purposes for Scale Center.

·Amazon Web Services, Inc.

·United States Scale Center stores Customer Data for 30 days only.

·Service Provider used for processing and storage purposes for Agentforce Vibes (f/k/a Code Builder).

·Heroku, Inc. (on Amazon Web Services, Inc).

·United States

·Canada

·Germany

·Ireland

·Provider of scheduling and optimization functionality for Field Service. Customer Data is hosted in one of the following regions.

·ClickSoftware, Inc. United States Australia Germany Canada Service provider of Digital Engagement support for the WhatsApp Messaging Channel Cognizant Worldwide Limited Philippines Service provider for processing and routing United States 85

·services - if Customer has enabled enhanced routing in their Omni-Channel Settings.

·Amazon Web Services, Inc.

·Brazil Enhanced routing is on by default for all new Customers, but Customers may revert to standard routing in their Omni-Channel Settings.

·Canada

·Germany

·France

·Sweden

·United Kingdom

·Israel

·Italy

·Switzerland

·United Arab

·Emirates

·Australia

·Japan

·South Korea

·India

·Singapore

·Indonesia

·Service and hosting provider for Agentforce Contact Center for a voice point-of-presence for call transmission and transcript storage services.

·Amazon Web Services, Inc.

·United States

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·86

·Japan

·Brazil

·Singapore

·South Korea

·Salesforce Spiff

·Purpose of Processing Sub-processors Locations Additional Details Hosting provider for all functionality. Amazon Web Services, Inc.

·United States United States is default hosting location; Data is hosted in Germany upon customer request Germany Service provider for connectors to other platforms Workato, Inc. United States Email service provider for all functionality Mailgun Technologies, Inc.

·United States

·87

·Salesforce Starter (fka Self-Service CRM), including Marketing Email Sends Salesforce Starter (fka Self-Service CRM) marketing functionality, including Marketing Email Sends, runs partially on the Sales, Service and Experience Cloud infrastructures - see infrastructure details for Salesforce Services, and relies on data from, and writes data to, Salesforce Data 360 infrastructure. Salesforce Starter (fka Self-Service CRM) marketing functionality also incorporates features run on the following infrastructures:

·Marketing Cloud: Intelligence and Intelligence Data Pipelines (formerly Datorama), Marketing Cloud: Intelligence Reports for Engagement (formerly Datorama Reports), Marketing Cloud: Marketing Cloud Engagement Services, Marketing Cloud: Marketing Cloud Einstein, Marketing Cloud Account Engagement, Marketing Cloud Next, Privacy Center, Salesforce Inbox, and Sales Engagement (formerly High Velocity Sales). Please see infrastructure details for each of these features.

·Salesforce Web3 Services (including Web3 Connect and NFT Management) Salesforce Web3 is a managed package-see infrastructure details for Salesforce Services.

·Service Cloud Einstein

·Service Cloud Einstein is an add-on Service to Service Cloud, and runs partially on the Service Cloud infrastructure--see infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Einstein Reply Recommendations. Customer Data is hosted in one of the following regions depending on the location of the Customers Salesforce Services org.

·Amazon Web Services, Inc.

·United States

·Germany

·Ireland

·United Kingdom

·Canada

·Japan

·Australia

·Customers who purchased Einstein Reply Recommendations on or before August 10, 2025 and based in the APAC region may also have data stored on 88

·Amazon Web Services infrastructure in the United States or India in addition to their region.

·Hosting Provider for Einstein Case

·Classification and Einstein Case Wrap-Up.

·Amazon Web Services, Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·Sweden

·Israel

·South Africa

·89

·Service Cloud Voice

·Service Cloud Voice is an add-on to Service Cloud, and runs partially on Service Cloud infrastructure-see infrastructure details for Salesforce Services.

·Purpose of Processing Sub-processors Locations Additional Details Service and hosting provider used for transmission and call transcript storage services.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·Germany

·France

·Sweden

·United Kingdom

·Australia

·Japan

·South Korea

·India

·Singapore

·Einstein Generative AI Services

·Einstein Generative AI Services include Covered Services branded as "Agentforce"7, including Agentforce Voice, Einstein for Platform, Einstein for Sales, Einstein for Service, Einstein for Field Service, Einstein GPT for Commerce, Einstein GPT for Sales, Einstein GPT for Service, Pre-Work Brief (available through the Field Service - Einstein 1 Edition SKU), the Customer Experience Intelligence feature of Service Cloud,8 ApexGuru, and Einstein Generative AI Services for Salesforce Industries Clouds. These Services include features that run on multiple infrastructure, and Customer access to Einstein Generative AI Services is through another Service, as described further in the Einstein Platform SPARC. See infrastructure details for 7 Einstein Generative AI Services do not include the Agentforce Vibes integrated development environment (IDE) (f/k/a Code Builder) but do include the Agentforce Vibes extension (f/k/a Agentforce for Developers).

88 This Documentation applies to the Customer Experience Cloud Intelligence feature of Service Cloud if the Customer uses the Generative AI features instead of bringing their own Natural Language Processing service for sentiment analysis. 90

·Salesforce Services and the applicable Einstein features. See infrastructure details for Agentforce Speech Foundations for applicable text to speech, speech to text, and Agentforce Voice features.

·Purpose of Processing Sub-processors Locations Additional Details Provider of generative artificial intelligence services.

·Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Batch Processing via Azure OpenAI utilizes global endpoints, geo-aware routing rules are not supported.

·For more details see Geo-Aware Routing for OpenAI and Azure OpenAI Switzerland France Germany Sweden India Australia Japan Brazil Canada United Kingdom Korea Poland South Africa Norway Provider of generative artificial intelligence services.9 Google LLC United States If Customer Data is routed to an LLM provider via an endpoint hosted on Google the disclosed region closest to Customer's Salesforce Org applies. In the event of a failover, Customer Data is temporarily re-routed through an endpoint hosted on Google in the US.

·Germany

·Japan

·Australia

·Brazil

99 Agentforce Coworker operates in the following regions: United States, The Netherlands. 91

·India

·The Netherlands

·Hosting Provider for all functionality and provider of generative artificial intelligence services.10, 11 Amazon Web Services, Inc.

·United States Customers in Australia who use the Service Replies feature may also have data stored on Amazon Web Services infrastructure India.

·If Customer Data is routed to an LLM provider via an endpoint hosted on Amazon Web Services the disclosed region closest to Customer's Salesforce Org applies. In the event of a failover, Customer Data is temporarily re- routed through an endpoint hosted on Amazon Web Services in the US.

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·Sweden

·Israel

·South Africa

·Provider of artificial voice services for Agentforce Sales Coach Amazon Web Services, Inc.

·United States

·Germany

·United Kingdom

·Ireland

·Canada

·India

·Australia

1010 ApexGuru operates in the following regions: United States, Germany, India, and Japan.

1111 Agentforce Coworker operates in the following regions: United States, Australia, France, Germany, Italy, Japan, Sweden. 92

·Japan

·Singapore

·Provider of web search results for generative artificial intelligence services.

·Bright Data Inc. Global If enabled by Customer, Bright Data Inc. may transmit public website links and content retrieved by prompts or queries in order to include such links and content in generative output.

·Provider of web search results for generative artificial intelligence services.

·SuSea, Inc. (doing business as You.com) United States If enabled by Customer, SuSea, Inc. may transmit public website links and content retrieved by prompts or queries in order to include such links and content in generative output.

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Singapore

·South Korea

·Shift Management

·Shift Management is a managed package that runs on top of the Salesforce Services--see infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Provider of scheduling and optimization functionality for all functionality. Customer ClickSoftware, Inc. United States Australia 93

·Data is processed in one of the following regions.

·Germany

·Service Provider for support scheduling and optimization functionality for all functionality. Customer Data is processed in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Australia

·Germany

·Slack

·Applicable to the services branded as (a) Slack, including Slack AI and (b) GovSlack.

·Purpose of Processing Sub-processors Locations Additional Details Slack services, including Slack AI (excluding GovSlack): Hosting provider for all functionality. Customers may select a data region, but as described in this help article, certain Customer Data may be stored outside this data region.

·Amazon Web Services, Inc.

·United States

·Australia

·Brazil

·Canada

·France

·Germany

·Customer Data from the Germany region is backed up in France, and vice versa.

·India

·Japan

·Singapore

·South Korea

·Sweden

·Germany

·Customer Data from the Sweden region is backed up in Germany.

·Switzerland

·Germany

·Customer Data from the Switzerland region is backed up in Germany. 94

·United Arab

·Emirates

·United Kingdom

·Slack services including Slack AI (excluding GovSlack): Hosting provider for Availability zones/Edge servers for all functionality.

·Amazon Web Services, Inc.

·United States Customer Data may be transmitted through any Edge region to provide better and faster service response time, depending, for example, on the location of Slack Users.

·Australia

·Germany

·India

·Ireland

·Japan

·Singapore

·South Africa

·United Kingdom

·Brazil

·Sweden

·GovSlack services: Hosting provider for all functionality.

·Amazon Web Services, Inc.

·United States Customer Data is stored on the AWS US-GOV-EAST instance. Salesforce may route the transmission of encrypted Customer Data through various points, including any of its US AWS GovCloud data centers, but the storage of Customer Data will be limited to the US- GOV-EAST data center.

·GovSlack services: Hosting provider for Availability zones/Edge servers for all functionality Amazon Web Services, Inc.

·United States Customer Data may be transmitted through any AWS GovCloud Edge region to provide better and faster service response time depending, for example, on the location of Slack Users.

·Slack Huddles functionality (excluding GovSlack): audio and video streams.

·Amazon Chime (by Amazon Web Services, Inc.)

·United States

·Australia

·95

·Brazil

·Canada

·France

·Germany

·India

·Ireland

·Italy

·Japan

·Singapore

·South Africa

·South Korea

·Sweden

·United Kingdom

·Switzerland

·Germany

·United Arab

·Emirates

·Slack Clips functionality (excluding GovSlack): conversion of source video for improved playback Amazon Web Services, Inc. Elemental MediaConvert United States Australia Canada France Germany India Japan 96

·South Korea

·United Kingdom

·Brazil

·Sweden

·Switzerland

·Slack Huddles and Slack Clips functionality (excluding GovSlack): transcripts for Slack Huddles and Slack Clips Amazon Transcribe (by Amazon Web Services, Inc.)

·United States

·Australia

·Canada

·France

·Germany

·India

·Japan

·South Korea

·United Kingdom

·Brazil

·Sweden

·Switzerland

·Slack Huddles functionality (GovSlack):

·audio and video streams.

·Amazon Chime (by Amazon Web Services, Inc.)

·United States

·Slack Clips functionality (GovSlack):

·conversion of source video for improved playback Amazon Web Services, Inc. Elemental MediaConvert United States Slack Huddles and Slack Clips functionality (GovSlack): transcripts for Slack Huddles and Slack Clips Amazon Transcribe (by Amazon Web Services, Inc.)

·United States

·97

·Hosting Provider for email notifications (e.g., workspace invitations) Provider of generative artificial intelligence services.

·Google LLC United States

·CDN for all functionality Cloudfront (on Amazon Web Services, Inc.)

·Global

·Service provider of customer support tools Zendesk, Inc. United States Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Provider of web search results for Slackbot. SuSea, Inc. (doing business as You.com) United States If enabled by Customer, SuSea, Inc. may transmit public website links and content retrieved by prompts or queries to Slackbot in order to include such links and content in generative output.

·Tableau Cloud

·*Note: Certain Tableau Cloud SKUs may have "Broadcast" features or similar functionality that provide customers the opportunity to publish visualizations and their underlying workbooks on Tableau Public or other public-facing forum(s) with unauthenticated user bases ("Additional Tableau Features"). This disclosure of Tableau Cloud's infrastructure environment and sub-processors does not apply to such Additional Tableau Features. See Salesforce Services section for the Microsoft Teams integration.

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for all functionality.

·Administrators can set the region for Tableau Cloud Services using Tableau's platform Account Settings.

·Amazon Web Services, Inc.

·United States A list of Tableau Cloud Services sites and data center locations is available here.Australia Canada Germany Indonesia Ireland Japan 98

·Singapore

·United Kingdom

·Switzerland

·Hosting Provider for Explore in Tableau. Amazon Web Services, Inc.

·United States

·Hosting Provider for Release Preview Amazon Web Services, Inc.

·United States

·Hosting Provider for Tableau AI, including features in Pulse and Tableau Agent Amazon Web Services, Inc.

·United States

·Germany

·India

·Provider of generative artificial intelligence services for Tableau AI, including features in Pulse and Tableau Agent Microsoft Corporation (Microsoft Azure) United States Microsoft Azure OpenAI will be available as of June 2024.Germany India Australia Japan Brazil Switzerland Provider of generative artificial intelligence services for Tableau AI, including features in Pulse and Tableau Agent (formerly Einstein Copilot for Tableau) OpenAI, L.L.C. United States Messaging service used to process and route emails.

·Amazon Web Services, Inc.

·Global

·CDN for all functionality. Cloudfront (Amazon Web Services, Inc.)

·Global

·99

·Provider for orchestration of background workflows Temporal Technologies Inc.

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Singapore

·South Korea

·Tableau Next (Formerly Tableau Einstein) Tableau Next is dependent on Salesforce Data 360 (see infrastructure details for Salesforce Data 360) and also runs in part on the same infrastructure as the Salesforce Services (see infrastructure details for Salesforce Services).

·Unified Messaging

·Unified Messaging runs partially on Data Cloud and Marketing Cloud: Marketing Cloud Engagement Services infrastructures and incorporates features that run on the following infrastructures: Service, Sales, and Experience Cloud - see infrastructure details for Salesforce Services, Marketing Cloud: Marketing Cloud Engagement Services, and Enhanced Messaging. Please see infrastructure details for each of these features. 100

·Vlocity Services

·Vlocity Communications package, Vlocity Media and Entertainment package, Vlocity Energy Utilities package, Vlocity Insurance package, Vlocity Health package, and Vlocity Government package are managed packages that run on top of the Salesforce Services. Communications Cloud, Media Cloud, and Energy Utilities Cloud Services are an extension of the Salesforce Services and where indicated may include the applicable Vlocity package listed above. See infrastructure details for Salesforce Services. Communications Cloud and Media Cloud also includes features that may use the Einstein Generative AI Services, please see the infrastructure details for these features. Some Customers who purchase Communications Cloud, Energy Utilities Cloud, or Media Cloud have access to Salesforce Maps Lite; for Customers who use this functionality, see infrastructure details for Salesforce Maps. Some Customers who purchase Media Cloud or Communication Cloud may have access to Revenue Cloud Advanced features. For Customers who use these functionalities, see infrastructure details for Revenue Cloud Advanced. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider of document generation processing for Server-Side Document Generation feature for Vlocity Communications package, Vlocity Media and Entertainment package, Vlocity Energy Utilities package, Vlocity Insurance package, Vlocity Health package, and Vlocity Government package. Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States

·Brazil

·Canada

·France

·Germany

·Sweden

·United Kingdom

·Australia

·India

·Japan

·Singapore

·South Korea

·Hosting Provider for Vlocity Digital

·Commerce and Order Management Plus.

·Customer Data is hosted in one of the following regions.

·Amazon Web Services, Inc.

·United States These Vlocity Services run on AWS infrastructure Brazil Germany Ireland 101

·United Kingdom

·Australia

·Service provider of runtime services used by TMForum APIs powered by MuleSoft, for the Vlocity Communications package.

·Customer Data is processed in one of the following regions.

·Amazon Web Services, Inc.

·United States If a Customer: (a) enables the TMForum APIs powered by MuleSoft feature as an add-on to the Vlocity Communications package, and (b) has Customer Data transmitted using runtime services, that Customer Data will be processed on AWS infrastructure.

·Brazil

·Canada

·Australia

·Japan

·Singapore

·Germany

·Ireland

·United Kingdom

·Service provider for Digital Commerce and Order Management Plus packages used to process application, database, and system log files.

·SumoLogic, Inc. United States Provider of generative artificial intelligence services.

·Microsoft Corporation

·(Microsoft Azure) United States Switzerland France Germany Sweden India Australia Japan 102

·Brazil

·Canada

·United Kingdom

·Provider of generative artificial intelligence services.

·WDC

·WDC refers to Services formerly branded as Work.com provisioned before May 1, 2020). See infrastructure details for Salesforce Services.

·Workforce Engagement Management

·See infrastructure details for Salesforce Services. Additional sub-processors for this Service are:

·Purpose of Processing Sub-processors Locations Additional Details Hosting Provider for Intelligent Forecasting Machine Learning.

·Amazon Web Services, Inc.

·United States

·103

·SERVICES ON THE HYPERFORCE OPERATING ZONE (FORMERLY EU OPERATING ZONE) INFRASTRUCTURE

·With respect to Covered Services on the Hyperforce Operating Zone infrastructure, in the following limited circumstances, Customer Data may be stored and/or processed outside of the European Union or Switzerland, as applicable:

·○ To maintain the availability and performance of the Covered Services. In the event that regularly scheduled performance and availability testing of a Customer Org indicates a Customer Org is experiencing performance or availability issues, a limited set of Customer Data may be evaluated outside of the HF Operating Zone to resolve the error. Such Customer Data is limited to a copy of a Customer's Org configuration. No personal data is collected from standard Org configurations.

·○ To detect, investigate, respond to, and remediate incidents impacting Customer Data, such as Customer Data Incidents as defined in Section 7 of the DPA.

·○ If Customer provides Customer Data when engaging with Customer Support. Please note it is not necessary for Customer to provide Customer Data to log a support case or to obtain support.

·○ Hyperforce Operating Zone support personnel may communicate via private Slack channels to resolve customer support cases that require collaboration between the HF Operating Zone support team. If Customer grants HF Operating Zone support personnel access to the Customer Org, Customer Data may be shared between HF Operating Zone support personnel in private Slack channel messages to resolve the Customer's support case. While processing of Slack messages may be done outside of the HF Operating Zone, Slack messages are encrypted at rest and in transit.

·○ Some Content Delivery Networks ("CDNs") transfer and cache Customer Data at the CDN node hosted in various locations globally.

·Customers may request to enable connection to such CDNs by logging a support case or reaching out to the account team.

·○ Salesforce may store and process Administrative Customer Data (as defined below) to assist in debugging, to provide Customer support, and to detect, investigate, and prevent security incidents. Administrative Customer Data is stored in the United States in environments that provide the appropriate technical and organizational measures for protection of the security (including protection against unauthorized or unlawful processing and against accidental or unlawful destruction, loss, alteration, damage, or access to, or unauthorized disclosure of, Administrative Customer Data), confidentiality, and integrity of Administrative Customer Data. "Administrative Customer Data" includes:

·■ metadata supplied to Covered Services when connected with third party services a Customer may choose to use with the Covered Services as described above in the section titled "Interoperation with Other Services".

·■ Setup metadata entered by Customer such as folder names, attachment names, names of custom objects, urls, and custom Apex code.

·■ Search queries entered into the Covered Services (but not search results).

·○ For the purposes of preventing fraud or abuse and to comply with applicable law, hosting provider AWS reserves the ability to access systems processing and storing encrypted Customer Data. Salesforce has implemented technical measures that prevent AWS from 104

·accessing unencrypted Customer Data and from accessing encryption keys used to encrypt Customer Data. With Platform Encryption, Customers may generate and store encryption key material outside of Salesforce.

·○ In response to a legally binding request to disclose Customer Data for which Salesforce has exhausted all the available remedies as described in the Agreement.

·○ When Customer provides private keys for serving custom domains with customer-provided HTTPS Certificates on Salesforce servers, those private keys may be stored in the United States. Prior to storage in the United States, private keys will be encrypted using key management systems located within the HF Operating Zone to prevent decryption outside the HF Operating Zone.

·○ When Customer registers public certificate identifiers for mTLS authentication, this public-facing information may be replicated globally.

https://slack.com/slack-subprocessors

·Salesforce Infrastructure and Sub-processors

·Sub-processor Notifications

·Sub-processors Storing Customer Data

·Customer Support

·Related Services

·Hyperforce

·Support For All Services

·Salesforce Argentine

·SFDC Austria GmbH

·SFDC Sweden AB

·Salesforce UK Limited

·Switzerland

·Thailand

·United Kingdom

·Ireland

·United States

·Agentforce IT Service

·United States

·Germany

·United Kingdom

·Canada

·India

·Australia

·Japan

·Brazil

·Switzerland

·Singapore

·Indonesia

·France

·South Korea

·United Arab

·Emirates

·Italy

·Sweden

·Israel

·South Africa

·Hosting Provider for Configuration

·United States

·Agentforce Speech Foundations

·India

·Japan

·Singapore

·South Korea

·United Kingdom

·United States

·United States

·Canada

·France

·Germany

·India

·Japan

·Singapore

·South Korea

·Sweden

·United Kingdom

·United States

·South Korea

·Sweden

·United Kingdom

·United States

·United States

·Google LLC United States

·Australia

·United States

·Automotive Cloud

·United States

·Brazil

·Canada

·Australia

·India

·Japan

·Singapore

·South Korea

·France

·Germany

·Sweden

·United Kingdom

·Brazil

·Canada