How to govern Salesforce Einstein / Agentforce
How to govern Salesforce Einstein and Agentforce: AI that drafts, scores and increasingly acts on customer records inside your CRM.
Salesforce · Reviewed quarterly, and when the vendor ships a capability change or a customer declares the tool · Last reviewed 16 Oct 2026
Governance change Reviewed the Winter '27 Agentforce release-note changes for September and October. The Agentforce platform is enabled by default for new organisations and is being enabled for existing ones from September. Agents can remember what matters to a person, accept file uploads, authenticate to external MCP servers with per-person credentials, and pick a default model dynamically. Einstein Bots upgrade to Agentforce Service Agent. Several models are rerouted on dates from 20 October to 11 December. Full changelog ↓How Salesforce Einstein / Agentforce is used
We see six common ways businesses use Salesforce Einstein / Agentforce, and we govern each one on its own terms. If your team uses it differently, that is fine: you describe the use in your own words and Certrak works out the governance from what it actually does.
General productivity assistance
Consequence to people: MediumDrafting, summarising, brainstorming, internal Q&A - day-to-day help with internal work
Customer communications drafting
Consequence to people: HighDrafting customer emails, support replies, or other outbound communications - reviewed before sending
Sales lead scoring and prioritisation
Consequence to people: HighRanking leads, suggesting next actions, prioritising sales effort
Customer segmentation and personalisation
Consequence to people: HighGrouping customers for targeted treatment, personalisation, or recommendations
Customer-facing chatbot or automated support
Consequence to people: HighInteracting with customers directly, without a person reviewing each response
Autonomous task agent
Consequence to people: HighGeneral-purpose AI agent that takes actions across your tools and systems - email, calendar, messaging, files
Governing Salesforce Einstein / Agentforce in practice
- Name one person who owns Salesforce Einstein / Agentforce in your business. Governance starts with a name.
- Write down what Salesforce Einstein / Agentforce is used for. Certrak recognises 6 common uses: General productivity assistance, Customer communications drafting, Sales lead scoring and prioritisation, Customer segmentation and personalisation, Customer-facing chatbot or automated support and Autonomous task agent. Yours may differ; write down yours.
- Decide what Salesforce Einstein / Agentforce may and may not be given. Personal information is in scope for some uses; write the boundary down before it is needed.
- There is no human review of outputs. Decide whether that is acceptable for each use, and what would make you change it.
- Salesforce Einstein / Agentforce can create, change, or delete records in another system and send messages outside the business without a person approving. Record which of these you allow, and who can change that.
- Look at this again every month, and sooner on any of these: industry incidents, vendor model updates, autonomy level changes and data classification changes.
What changed, and how Certrak responded
We record every check here, including the ones that changed nothing. A check that found no governance change proves we looked.
-
Governance change Scheduled review
Agentforce and Generative AI, Winter '27 release note changes
Salesforce shipped it 28 Sep 2026.
Reviewed the Winter '27 Agentforce release-note changes for September and October. The Agentforce platform is enabled by default for new organisations and is being enabled for existing ones from September. Agents can remember what matters to a person, accept file uploads, authenticate to external MCP servers with per-person credentials, and pick a default model dynamically. Einstein Bots upgrade to Agentforce Service Agent. Several models are rerouted on dates from 20 October to 11 December.
How Certrak responded: Where Salesforce AI is used for everyday work, customer communications, lead scoring or segmentation, agents can now act on records and remember people across conversations, and the platform may be on without anyone choosing it. Owners are asked whether Agentforce agents are active; if they are, the system is treated as changing records and the matching controls apply.