AI Data Privacy: What Leaves Your Salesforce Org
Online version: https://funneleconomics.ai/solutions/revops-it
Funnel Economics has two components, and their data paths are not the same. Funnel Economics Core calculates in your Salesforce org. Funnel Economics Strategist is an optional add-on: the prepared context passes through a service we operate to the language model you have chosen. For AI data privacy, that means: whoever approves assesses each path on its own.
Which questions do IT and security ask?
IT and security do not read the metrics; they approve the installation and the access. Six questions come before the approval. The first four each have their own answer for Core and for Strategist.
What leaves Salesforce?
Funnel Economics Core calculates in your Salesforce org. For dashboard commentary, Core can call a language model. This AI data transfer is off by default and is enabled per org and per user; the package masks personal values before the call.
Funnel Economics Strategist is an optional add-on. The prepared context passes through a service we operate to the language model you have chosen, with rep names, opportunity names and record links. The service keeps no result store of its own.
What does Funnel Economics write in Salesforce?
Strategist's Salesforce access is read-only. Core writes only its own package objects, never standard objects such as Opportunities.
Who masks personal data?
In Core, the package masks personal values before the call. With Agentforce, the Einstein Trust Layer applies on top. The Einstein Trust Layer applies to Core through Agentforce. It does not apply to Strategist.
In Strategist, the names of sales staff and opportunities reach the model by design, because evaluating results by person and by deal is the purpose. Strategist does not mask or pseudonymise them. This is a decision, not a gap.
There is one narrow exception. A session recognised as a sales rep does not receive its colleagues' names from one tool. That is one of eleven tools that carry rep names — not a general property.
How is access controlled and withdrawn?
Core's AI data transfer is off by default and is enabled per org and per user.
Funnel Economics Strategist is an optional add-on and not active by default. Strategist requires a per-user authorisation that your Salesforce administrator controls and can revoke.
The package's AI switch and permission set do not stop Strategist yet — the server-side check is built but not in force. A central switch-off in Funnel Economics does not exist yet.
Under whose agreement does Strategist run?
The leg through our service requires a data-processing agreement, which we are preparing.
The language model is yours to choose. The technical precondition is an environment that can attach an MCP server.
The language model processes the data under your own agreement with the model's provider. We strongly recommend an enterprise agreement with that provider, including a data-processing agreement that excludes the use of the data for training — a recommendation, not a precondition.
Compliance with GDPR or CCPA is a property of your configuration, roles and agreements — not something a product can guarantee on its own.
What is the status of the security review?
The AppExchange security review is planned after the beta phase.
What does Core calculate, and what does Strategist calculate?
Funnel Economics Core calculates bEFV and a simplified rEFV by health status in your Salesforce org and shows both in the dashboards. Funnel Economics Strategist measures the factors of rEFV on your own history; further figures such as cEFV build on that. Strategist also calculates BPV.
| Figure | Core | Strategist | More |
|---|---|---|---|
| bEFV | yes | yes, identical | bEFV in the glossary |
| rEFV | simplified, by health status | with measured factors per band | rEFV in the glossary |
| BPV | no | yes | BPV in the glossary |
| cEFV | no | yes | cEFV in the glossary |
Core ships with dashboards. Among other things, they show how the open deals spread across HEALTHY, DELAYED and STALLED, as a share and as an amount.
Which questions the metrics answer in day-to-day operations is described on the page Sales Pipeline Metrics for RevOps: One Number per Stage.
Two components, two data paths: Core calculates in your Salesforce org. With Strategist, the context passes through a service we operate to the language model you have chosen.
How to get started
Funnel Economics is entering its beta phase. During the beta, you start by running it against a Salesforce sandbox.
Funnel Economics Core is a managed package that runs in your Salesforce org. The prerequisite is Salesforce Enterprise Edition; Data Cloud is not required.
The calculation logic is compiled code in the package's protected namespace. Neither your users nor your administrators can inspect or modify it.
Discover is meant for trying Funnel Economics before any installation. It is built on a demo org.
All data paths, the controls and their status are set out on the Security & Trust page. For anything beyond them, ask us directly.
What you check
This page describes what you check as the person responsible for IT. Which data is processed where is set out on the security page.
Related terms
FAQ
Where does Funnel Economics Core calculate, and what leaves Salesforce in the process?
Funnel Economics Core calculates in your Salesforce org. For dashboard commentary, Core can call a language model. This AI data transfer is off by default and is enabled per org and per user; the package masks personal values before the call.
What leaves Salesforce when Strategist is active?
Funnel Economics Strategist is an optional add-on. The prepared context passes through a service we operate to your chosen language model. Rep names, opportunity names and record links go along by design: an answer with placeholders would be useless. Our leg requires a data-processing agreement, which we are preparing. The language model processes the data under your agreement with its provider. There we strongly recommend an enterprise agreement with a data-processing agreement that excludes training use; a recommendation, not a precondition. Your Salesforce administrator controls and can revoke per-user authorisation.
What does Core calculate, and what does Strategist calculate?
Funnel Economics Core calculates bEFV and a simplified rEFV by health status in your Salesforce org and shows both in the dashboards. Funnel Economics Strategist measures the factors of rEFV on your own history; further figures such as cEFV build on that. Strategist also calculates BPV.
Can our administrator switch Strategist off?
Per user, yes: Strategist requires a per-user authorisation in your Salesforce that your administrator controls and can revoke. The package's AI switch and permission set do not stop Strategist yet — the server-side check is built but not in force. A central switch-off in Funnel Economics does not exist yet.
Are personal data masked before they reach the language model?
In Core, yes: the package replaces personal values with placeholders before the callout and restores them inside your org. In Strategist, no: the names of sales staff and opportunities reach the model by design, because evaluating results by person and by deal is the purpose. This is a decision, not a gap.
Is Funnel Economics GDPR and CCPA compliant?
Compliance is a property of your configuration, roles and agreements — no product can guarantee it on its own. This page states per path which data go where, so that you can assess it for your setup.