Enabling Opt Out of Customer Data Access is a contractual change with operational implications. The steps below cover the decision and implementation process.
- Confirm regulatory requirement
Document the specific compliance framework or internal policy requiring opt-out. Without a documented requirement, the operational cost rarely justifies.
- Engage Salesforce account team
Contact your account manager. Opt-out is a contractual change; the account team coordinates with Salesforce legal and operations.
- Designate authorization contacts
Pick the customer contacts who will receive and approve authorization requests. Typically security and compliance leads. Document the escalation path.
- Plan support workflows
Identify likely support scenarios that will trigger authorization requests. Build internal expertise to handle issues without Salesforce-employee data access.
- Execute the contract change
Salesforce processes the contractual change. Confirm via account team that opt-out is in effect.
- Train internal teams
Train support, operations, and incident response on the new constraints. Communicate the expected longer resolution times.
- Audit periodically
Request quarterly audit reports from Salesforce showing employee access activity. Confirm opt-out is operating as expected.
Default. Login Access governs admin access; Salesforce employees follow standard policy.
Salesforce employees cannot access without per-incident authorization.
Customer designees who approve access requests.
Periodic reports of Salesforce-employee access activity.
Layer opt-out with Shield Cache-Only Keys for strongest posture.
- Operational friction extends support resolution times. Plan internal expertise to compensate.
- Authorization workflow needs a defined contact. Without one, requests get stuck and cases stall.
- Contractual change, not self-service. Engage account team; do not expect a Setup toggle.
- Reversal is also contractual. Treat as long-term commitment.
- Opt-out alone does not constitute compliance. Pair with documented internal procedures and audit reporting for full posture.