What exactly did Salesforce promise about data at Dreamforce 26?

Benioff said that when you work in Salesforce apps and platforms, your data is your data and it does not go in the models. He described a zero data retention policy at the model provider, tested repeatedly by customer security teams. The Claudeforce plugin, per the keynote, uses MCP servers with zero data retention. That is a promise about what Anthropic keeps, which is nothing.

What is the observation record and why does it matter more than the raw data?

Every action an agent takes on your data generates something that is not the data: the action itself, whether a person reversed it, how fast, what got escalated, which rule fired, and whether the outcome closed the loop. That record is what makes the thousandth action better than the first. Raw records port between vendors trivially now. The observation record is keyed to your entities and outcomes and only exists if something was acting in your business long enough to accumulate it. It is where switching costs moved.

Who owns that record in the Salesforce model?

Whoever runs the agents, and under AIforce that is Salesforce. Stokes framed the company's value as the trust to hold customer data rather than the interface, which is a description of exactly this position: the model is rented, the record is held. Nothing in the keynote addressed whether customers can read or export the trace of agent actions in their own org, so treat that as an open contract question, not a settled one.

What should I ask a vendor before deploying agents on my system of record?

Three things. Who owns the trace of what the agents did in my tenant. Who can read it, including whether the vendor uses it to improve service for other customers. And does it leave with me in a form I can load somewhere else. Zero data retention at the model layer is table stakes. The answers to those three are where your leverage is.

How does Heidi handle this?

Every act carries a receipt and every outcome gets labeled against the decision that produced it. The change I am making after Dreamforce is to put that record in front of the customer as the thing they own: readable, exportable, and stated in the terms. Statistical learning across tenants is out of scope permanently, so one customer's record never trains anything that serves another.

Zero Data Retention and What Your AI Agents Leave Behind

Does zero data retention mean the vendor keeps nothing from your AI agents?

THE SHORT ANSWER

No. Zero data retention is a promise about the model provider: your business data is sent to answer a question and the model company keeps none of it. Marc Benioff made exactly that promise at Dreamforce 26, and Claudeforce runs on it. What it does not cover is the observation record generated wherever the agents run: which actions were taken, which a human reversed and how fast, what was escalated, which rule fired, and how the outcome closed. That record is the only asset in an agent deployment that compounds, and it accrues to whoever operates the agents, which in the Salesforce case is Salesforce. Patrick Stokes said as much on stage when he said the company's value is the trust customers put in it to hold their data. The question to ask a vendor is not whether the model keeps your data. It is who owns the trace of what the agents did in your org, who can read it, and whether it leaves with you.

Zero data retention is the right promise about the model layer and it has become the sentence vendors say instead of answering the harder question.

The harder question is what the agents leave behind. An agent that updates a record, drafts an email, or routes an approval generates a trace of what it did and what happened next. Multiply that across every action in an org for a year and you have an observation record that no wiki, export, or data migration can reproduce, because it was earned by acting, not written by a person.

Salesforce, to its credit, told you where that record lives. Read Stokes's line about trust as a product definition rather than a reassurance and it says: the model is a commodity, the interface is optional, and the held record is the business.

If you are a buyer, ask the three questions in the FAQ above before the credits are committed. If you are a builder, decide now whether the trace belongs to your customer, because retrofitting that decision after the record exists is the one thing nobody has managed yet.

Last reviewed 2026-09-17 · 1 min read

Does zero data retention mean the vendor keeps nothing from your AI agents?

SOURCES

THE LONG VERSION

RELATED ANSWERS