Policy covers customers' use of all Salesforce services
This is Salesforce's Acceptable Use and External-Facing Services Policy. It applies to customers' use of all services offered by Salesforce, Inc. or its affiliates, and it contains a separate paragraph for Slack Services. Capitalized terms the policy does not define take their meaning from the Main Services Agreement (MSA), which is not part of this saved document.
Supporting quotations
applies to customers’ use of all services offered by Salesforce, Inc. or its affiliates (“Salesforce”)
Capitalized terms used below but not defined in this policy have the meaning set forth in the Main Services Agreement (“MSA”).
Qualifications & exceptions
The policy is written about customers' use; this text does not separately say how it applies to individual members or guests of a customer's workspace.
Not stated here
The MSA's definitions of capitalized terms used here, such as External-Facing Service and Documentation, are not in the saved document.
Legal Rights & Agreement Rules · Context
Salesforce's AI Acceptable Use Policy is incorporated by reference
The policy says the terms of Salesforce's Artificial Intelligence Acceptable Use Policy, as posted at the stated address, are incorporated by reference into this policy. That AI policy is not part of this saved document, so its requirements are not analyzed here.
Supporting quotations
The terms of the Artificial Intelligence Acceptable Use Policy at https://www.salesforce.com/company/legal/agreements/ posted as of its effective date are hereby incorporated by reference.
Qualifications & exceptions
The incorporation is of the AI policy as posted 'as of its effective date'.
Not stated here
The text of the Artificial Intelligence Acceptable Use Policy is not supplied.
The phrase 'its effective date' does not say whose effective date or which date it means.
Legal Rights & Agreement Rules · Permission or license
Policy is dated July 08, 2025, and Salesforce can change it by posting
The saved copy shows the policy as last updated July 08, 2025. Salesforce may change the policy by posting an updated version at www.salesforce.com, and updates take effect when they are posted.
Supporting quotations
July 08, 2025
Salesforce may change this Policy by posting an updated version of the Policy at www.salesforce.com and such updates will be effective upon posting.
Qualifications & exceptions
Updates are effective on posting, not on notice to the customer.
Not stated here
The text describes no direct notice to customers or users when the policy changes.
Versions posted after the saved copy are not analyzed.
Legal Rights & Agreement Rules · Restriction or exception
A violation of the policy counts as a material breach of the customer's agreement
A customer's violation of this policy will be considered a material breach of the MSA and/or other agreement that governs the customer's use of the services.
Supporting quotations
violation of this Policy will be considered a material breach of the MSA and/or other agreement governing the customer’s use of the services
Qualifications & exceptions
The prohibitions in this policy also bar customers from allowing their users or third parties to do the listed things.
Not stated here
The remedies for a material breach come from the MSA or other governing agreement, which are not supplied.
Legal Rights & Agreement Rules · Restriction or exception
Customers may not do the listed things, or let users and third parties do them
Both prohibition lists are written against the customer and against anyone the customer lets act. For prohibited material, customers may not, and may not allow any third party including its users to, use services to create, send, upload, display, store, process or transmit it, or permit that use. For prohibited actions, customers may not use a service to, nor allow its users or any third party to use a service to, do the listed things. The verbs reach storing and processing as well as sending.
Supporting quotations
Customers may not, and may not allow any third party, including its users, to use services to create, send, upload, display, store, process, or transmit, or permit use of services to create, send, upload, display, store, process, or transmit:
Customers may not use a service to, nor allow its users or any third party to use a service to:
Qualifications & exceptions
The 'allow' and 'permit' wording puts responsibility on the customer for users and third parties.
Not stated here
The text does not say how the customer's responsibility works for a user act the customer did not know about.
Legal Rights & Agreement Rules · Restriction or exception
No drug-related material, or material that breaks laws or third-party rights
Prohibited material also includes material related to illegal drugs or paraphernalia, and any material that violates, encourages or furthers conduct that would violate any applicable laws, including criminal laws, or any third-party rights, including publicity or privacy rights.
Supporting quotations
Material related to illegal drugs or paraphernalia
Material that violates, encourages, or furthers conduct that would violate any applicable laws, including any criminal laws, or any third-party rights, including publicity or privacy rights
Qualifications & exceptions
'Applicable laws' is not tied to one country or region in this item.
Not stated here
The item does not say which jurisdiction's law decides what is 'applicable'.
Legal Rights & Agreement Rules · Restriction or exception
No unsolicited commercial email or spam
Customers may not use a service to generate or facilitate unsolicited commercial email (spam). The policy says this includes, but is not limited to: sending in violation of the CAN-SPAM Act or any other applicable anti-spam law or regulation; sending unauthorized mail via open, third-party servers; emailing users who have asked to be removed from a mailing list; and sending unsolicited email to significant numbers of addresses of individuals or entities with whom the sender has no preexisting relationship.
Supporting quotations
Generate or facilitate unsolicited commercial email (spam). Such prohibited activity includes, but is not limited to:
Sending communications or email in violation of the CAN-SPAM Act or any other applicable anti- spam law or regulation
Sending unauthorized mail via open, third-party servers
Sending email to users who have requested to be removed from a mailing list
Sending unsolicited emails to significant numbers of email addresses belonging to individuals and/or entities with whom you have no preexisting relationship
Qualifications & exceptions
'Includes, but is not limited to' means the listed examples are not the full boundary of the spam rule.
Not stated here
'Significant numbers' of addresses is not quantified.
Legal Rights & Agreement Rules · Restriction or exception
No impersonation, false accounts or address harvesting as part of spam
As examples of spam activity, the policy lists imitating or impersonating Salesforce, another person or their email address, or creating false accounts for the purpose of sending spam, and mining data or harvesting any web property, including any External-Facing Service, to find email addresses or other user account information.
Supporting quotations
Imitating or impersonating Salesforce, another person or his, her, or its email address, or creating false accounts for the purpose of sending spam
Mining data or harvesting any web property (including any External-Facing Service) to find email addresses or other user account information
Qualifications & exceptions
Both items sit under the spam example list.
The harvesting item's own wording does not mention a spam purpose.
Not stated here
The text does not say whether 'for the purpose of sending spam' applies only to false accounts or also to impersonation.
'External-Facing Service' is not defined in this policy.
Legal Rights & Agreement Rules · Restriction or exception
No calls, texts or other uninvited communications that break telephone and anti-spam laws
Customers may not use a service to generate or facilitate calls, SMS, MMS, other text messages, push notifications or other uninvited communications in violation of the Telephone Consumer Protection Act, the Do-Not-Call Implementation Act, or any other applicable law, including anti-spam, telemarketing, robocalling, caller ID spoofing or telephone consumer protection laws or regulations.
Supporting quotations
Generate or facilitate calls, SMS, MMS, other text messages push notifications, or other uninvited communications in violation of the Telephone Consumer Protection Act, the Do- Not-Call Implementation Act, or any other applicable law including anti- spam, telemarketing, robocalling, caller ID spoofing, or telephone consumer protection laws or regulations
Qualifications & exceptions
The item is tied to communications that are in violation of the named laws or other applicable law.
Not stated here
The policy names the laws but does not set out what they require.
Legal Rights & Agreement Rules · Restriction or exception
Services must be used within industry standards, carrier guidelines and communicated requirements
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not use the services in any manner that violates applicable industry standards, third-party policies, or requirements that Salesforce may communicate to its users. The text names, as included, all applicable guidelines published by the CTIA, the Mobile Marketing Association, the Self-Regulatory Principles as directed by the Digital Advertising Alliance and the Network Advertising Initiative, or any other generally accepted industry associations, carrier guidelines or other industry standards.
Supporting quotations
Use the services in any manner that violates any applicable industry standards, third-party policies, or requirements that Salesforce may communicate to its users, including all of the applicable guidelines published by the CTIA, the Mobile Marketing Association, the Self- Regulatory Principles as directed by the Digital Advertising Alliance and the Network Advertising Initiative, or any other generally accepted industry associations, carrier guidelines, or other industry standards
Qualifications & exceptions
Requirements 'that Salesforce may communicate to its users' can be set outside this document.
Not stated here
The third-party policies, carrier guidelines, industry standards and future Salesforce requirements this item points to are not in the saved document.
Legal Rights & Agreement Rules · Restriction or exception
No promoting or facilitating illegal activity, including illegal peer-to-peer file sharing
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not promote, facilitate or encourage illegal activity, or engage in activity in connection with illegal peer-to-peer file sharing.
Supporting quotations
Promote, facilitate, or encourage illegal activity
Engage in activity in connection with illegal peer-to-peer file sharing
Qualifications & exceptions
The peer-to-peer item is limited to illegal file sharing.
Not stated here
The text does not say whose law decides what is 'illegal'.
Legal Rights & Agreement Rules · Restriction or exception
No selling, distributing or exporting illegal or prescription drugs or controlled substances
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not sell, distribute or export illegal or prescription drugs or other controlled substances or paraphernalia.
Supporting quotations
Sell, distribute, or export illegal or prescription drugs or other controlled substances or paraphernalia
Qualifications & exceptions
Prescription drugs are named alongside illegal drugs; no exception for licensed sellers appears in this item.
Legal Rights & Agreement Rules · Restriction or exception
No gambling or running a gambling operation
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not engage in or promote gambling, or run a gambling operation.
Supporting quotations
Engage in or promote gambling, or run a gambling operation
Qualifications & exceptions
The wording does not say 'illegal' gambling, and no licensing or jurisdiction exception appears in this item.
Legal Rights & Agreement Rules · Restriction or exception
No using a service in a way that would disparage Salesforce
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not use a service in any manner that would disparage Salesforce.
Supporting quotations
Use a service in any manner that would disparage Salesforce
Not stated here
'Disparage' is not defined and no examples are given; the item does not say whether accurate criticism is covered.
Legal Rights & Agreement Rules · Restriction or exception
No directly operating private for-profit prisons or detention centers in the United States
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not directly manage, as the primary operator, private for-profit prison facilities or detention centers in the United States. The policy defines these as privately owned facilities in which people are incarcerated or otherwise involuntarily confined to carry out a punitive sentence imposed by a court, or for detention pending a trial, hearing or other judicial or administrative proceeding.
Supporting quotations
Directly manage, as the primary operator, private, for-profit prison facilities or detention centers in the United States
For-profit prisons and detention centers refer to privately owned facilities in which persons are incarcerated or otherwise involuntarily confined for purposes of execution of a punitive sentence imposed by a court or detention pending a trial, hearing, or other judicial or administrative proceeding
Qualifications & exceptions
The wording is limited to directly managing as the primary operator, and to facilities in the United States.
Not stated here
The text does not address facilities outside the United States, or customers that supply services to such facilities without being the primary operator.
Legal Rights & Agreement Rules · Restriction or exception
No use where failure could cause death, serious injury or major property damage
These items continue the Prohibited Actions list, whose lead says customers may not use a service to, nor allow their users or any third party to use a service to, do each item. Customers may not engage in activity where the use or failure of a service may result in the death or serious bodily harm of a person, or in significant damage to property.
Supporting quotations
Engage in activity where the use or failure of a service may result in the death or serious bodily harm of a person, or in significant damage to property
Qualifications & exceptions
The standard is that use or failure 'may result' in such harm, so potential harm is enough on the wording.
Not stated here
The item gives no examples of the activities it covers.
Legal Rights & Agreement Rules · Restriction or exception
No commercially advertising or selling listed firearms and parts to private citizens, worldwide
Worldwide, customers may not use a service to commercially advertise or sell the listed firearms and related accessories to private citizens. Listed firearms: automatic firearms; semi-automatic firearms that can accept a detachable magazine plus any of thumbhole stock, folding or telescoping stock, grenade or flare launcher, flash or sound suppressor, forward pistol grip, pistol grip (rifle) or second pistol grip (pistol), or barrel shroud; semi-automatic firearms with a fixed magazine that can accept more than 10 rounds; ghost guns; 3D printed guns; firearms without serial numbers; .50 BMG rifles; and firearms that use .50 BMG ammunition. Listed parts: magazines capable of accepting more than 10 rounds; flash or sound suppressors; multi-burst trigger devices; grenade or rocket launchers; 80% or unfinished lower receivers; blueprints for ghost guns and for 3D printed guns; barrel shrouds; thumbhole stocks; and threaded barrels capable of accepting a flash or sound suppressor.
Supporting quotations
Worldwide, customers may not use a service to commercially advertise or sell any of the following firearms and/or related accessories to private citizens.
Firearms: automatic firearms; semi-automatic firearms that have the capacity to accept a detachable magazine and any of the following: thumbhole stock, folding or telescoping stock, grenade launcher or flare launcher, flash or sound suppressor, forward pistol grip, pistol grip (in the case of a rifle) or second pistol grip (in the case of a pistol), barrel shroud; semi-automatic firearms with a fixed magazine that can accept more than 10 rounds; ghost guns; 3D printed guns; firearms without serial numbers; .50 BMG rifles; firearms that use .50 BMG ammunition.
Firearm Parts: magazines capable of accepting more than 10 rounds; flash or sound suppressors; multi-burst trigger devices; grenade or rocket launchers; 80% or unfinished lower receivers; blueprints for ghost guns; blueprints for 3D printed guns; barrel shrouds; thumbhole stocks; threaded barrels capable of accepting a flash suppressor or sound suppressor.
Qualifications & exceptions
Worldwide scope.
The wording limits the rule to commercially advertising or selling the listed items to private citizens, and to the items listed.
Not stated here
The text does not say how the lists apply to sellers who are not selling to private citizens, such as licensed dealers selling to one another.
Legal Rights & Agreement Rules · Procedure
Customers who host or post content must run their own copyright-notice process
Under the heading for the U.S. Digital Millennium Copyright Act or similar statutory obligations, to the extent a customer uses the services for hosting, advertising, sending electronic messages, or creating and hosting or posting material on websites, each customer must: comply with notices received under Title II of the Digital Millennium Copyright Act of 1998 (Section 512 of the U.S. Copyright Act) or a similar statute in other countries (the "DMCA"); set up a process to expeditiously respond to DMCA-compliant notices of alleged infringement and implement a DMCA-compliant repeat infringers policy; publicly display a description of its notice and takedown process on its instance of the services; and comply with that process, policy and description. Salesforce's own handling of copyright notices is a separate paragraph.
Supporting quotations
U.S. Digital Millennium Copyright Act or Similar Statutory Obligations
To the extent a customer uses the services for hosting, advertising, sending electronic messages, or for the creation and hosting of, or for posting material on, websites, each customer must:
Comply with any notices received under Title II of the Digital Millennium Copyright Act of 1998 (Section 512 of the U.S. Copyright Act) or similar statute in other countries (the “DMCA”)
Set up a process to expeditiously respond to notices of alleged infringement that comply with the DMCA and to implement a DMCA-compliant repeat infringers policy
Publicly display a description of its notice and takedown process under the DMCA on its instance of the services
Comply with such processes, policy(ies), and description.
Qualifications & exceptions
Applies 'to the extent' the customer uses the services for hosting, advertising, sending electronic messages, or creating, hosting or posting material on websites.
Covers the DMCA or a similar statute in other countries.
Not stated here
The text does not say which other countries' statutes count as 'similar'.
The statute itself is not supplied; only this policy's wording of the duties is.
Salesforce responds to valid copyright notices and may end accounts of repeat infringers
Salesforce says it is its policy to respond expeditiously to valid notices of claimed copyright infringement that comply with the DMCA. In appropriate circumstances, it will terminate the accounts of customers it suspects of repeatedly or blatantly infringing copyrights.
Supporting quotations
It is Salesforce’s policy to respond expeditiously to valid notices of claimed copyright infringement compliant with the DMCA.
In appropriate circumstances, Salesforce will terminate the accounts of customers who Salesforce suspects to be repeatedly or blatantly infringing copyrights.
Qualifications & exceptions
The response policy covers valid notices that comply with the DMCA.
Termination is 'in appropriate circumstances' and rests on what Salesforce suspects.
Not stated here
'Appropriate circumstances' and 'blatantly' are not defined.
This paragraph describes no counter-notice or reinstatement process.
Legal Rights & Agreement Rules · Permission or license
A notice alleging infringement can lead to disabling a customer's instance or removing material
If Salesforce receives a notice alleging that material on a customer's instance of a service infringes another party's intellectual property, it may disable that customer's instance of the service or remove the allegedly infringing material.
Supporting quotations
If Salesforce receives a notice alleging that material on a customer’s instance of a service infringes another party’s intellectual property, Salesforce may disable that customer’s instance of the service or remove the allegedly infringing material.
Qualifications & exceptions
The trigger is receiving a notice that alleges infringement; this sentence does not say the notice must be valid or DMCA-compliant, unlike the preceding paragraph.
The right is discretionary ('may') and offers two options: disable the instance, or remove the material.
Not stated here
The text states no warning, notice to the customer, or restoration step.
What disabling an instance involves is not described.
Cross-references
contrast (model-proposed): Salesforce responds to valid copyright notices and may end accounts of repeat infringers — contrast: Salesforce's stated policy is to respond to valid, DMCA-compliant notices, while the next paragraph lets it disable an instance or remove material on receiving a notice that merely alleges infringement. The text does not reconcile the two standards.