Salesforce Dictionary - Free Salesforce GlossarySalesforce Dictionary
Full Opt Out of Customer Data Access entry
How-to guide

Enable opt-out for your org

Enabling Opt Out of Customer Data Access is a contractual change with operational implications. The steps below cover the decision and implementation process.

By Dipojjal Chakrabarti · Founder & Editor, Salesforce DictionaryLast updated May 19, 2026

Enabling Opt Out of Customer Data Access is a contractual change with operational implications. The steps below cover the decision and implementation process.

  1. Confirm regulatory requirement

    Document the specific compliance framework or internal policy requiring opt-out. Without a documented requirement, the operational cost rarely justifies.

  2. Engage Salesforce account team

    Contact your account manager. Opt-out is a contractual change; the account team coordinates with Salesforce legal and operations.

  3. Designate authorization contacts

    Pick the customer contacts who will receive and approve authorization requests. Typically security and compliance leads. Document the escalation path.

  4. Plan support workflows

    Identify likely support scenarios that will trigger authorization requests. Build internal expertise to handle issues without Salesforce-employee data access.

  5. Execute the contract change

    Salesforce processes the contractual change. Confirm via account team that opt-out is in effect.

  6. Train internal teams

    Train support, operations, and incident response on the new constraints. Communicate the expected longer resolution times.

  7. Audit periodically

    Request quarterly audit reports from Salesforce showing employee access activity. Confirm opt-out is operating as expected.

Key options
Standard access controlsremember

Default. Login Access governs admin access; Salesforce employees follow standard policy.

Opt Out enabledremember

Salesforce employees cannot access without per-incident authorization.

Authorization contactsremember

Customer designees who approve access requests.

Audit reportingremember

Periodic reports of Salesforce-employee access activity.

Combination with Shieldremember

Layer opt-out with Shield Cache-Only Keys for strongest posture.

Gotchas
  • Operational friction extends support resolution times. Plan internal expertise to compensate.
  • Authorization workflow needs a defined contact. Without one, requests get stuck and cases stall.
  • Contractual change, not self-service. Engage account team; do not expect a Setup toggle.
  • Reversal is also contractual. Treat as long-term commitment.
  • Opt-out alone does not constitute compliance. Pair with documented internal procedures and audit reporting for full posture.

See the full Opt Out of Customer Data Access entry

Opt Out of Customer Data Access includes the definition, worked example, deep dive, related terms, and a quiz.