Universal Containers (UC) wants to assess Salesforce's generative features but has concerns over its company data being exposed to third- party large…

The Einstein Trust Layer's Zero-Data Retention Policy is a contractual commitment between Salesforce and its third-party Large Language Model (LLM) partners. This policy explicitly prohibits these partners from retaining any customer data sent to their models. Consequently, the data cannot be stored, accessed by the LLM provider after the transaction, or used for training their models or for any product improvements. This directly addresses all of Universal Containers' specified requirements for data privacy and security when using generative AI features.

A. Prompt Defense: This feature protects against malicious prompt injections and prevents the generation of toxic or harmful content. It secures the interaction, not the data privacy or retention.

C. Data Masking: This feature automatically redacts sensitive data like Personally Identifiable Information (PII) before the prompt is sent to the LLM. It only protects specific data types, not the entire data payload from being retained or used for training.

1. Salesforce Help

Einstein Trust Layer Documentation

"How the Einstein Trust Layer Protects Your Data": This document explicitly states

"We have zero-retention policies with our LLM partners so your data is never stored on their servers. Your data is never used to train their models." This directly supports the Zero-Data Retention Policy as the correct answer.

2. Salesforce AI

"Einstein Trust Layer" Whitepaper: In the section "Secure Data Retrieval & Dynamic Grounding

" the paper details the data flow. Under the "Zero Data Retention" subsection

it confirms that "Prompts and responses are not retained by third-party LLM providers." This reinforces that the policy prevents data from being kept outside the Salesforce environment.

3. Salesforce Developers Blog

"Bring Your Own LLM in the Einstein Trust Layer": This article discusses the architecture and highlights the trust boundaries. It explains that the Zero-Data Retention agreement is a cornerstone of the Trust Layer

ensuring that "customer data is not stored or reviewed by the LLM provider

" which aligns with UC's requirement that data cannot be accessed by the provider.