Learn About Einstein Bots Compliance

Bots are compliant with The Health Insurance Portability and Accountability Act (HIPAA), so customers in the healthcare industry can have secure conversations over Chat. Bots now exceed data confidentiality and privacy standards set by the Service Organization Controls reports (SOC 2), and they’re compliant with International Organization for Standardization (ISO) standards. Learn about how the bot infrastructure creates a secure environment with established processes and controls built around security, availability, and confidentiality of customer data.

Required Editions

View supported editions.

User Permissions Needed
To build and manage Einstein Bots:	Customize Application OR Modify Metadata OR Manage Bots
To add, edit, or delete channels	Customize Application

User Permissions Needed

To build and manage Einstein Bots:

Customize Application

Modify Metadata

Manage Bots

To add, edit, or delete channels

Customize Application

Einstein Bots are now HIPAA-compliant with Chat (In-App and Web). Beta and pilot features aren’t HIPAA-compliant. ISO and SOC 2 Compliance are available for all channels. Salesforce Shield is required for the customer to remain compliant while using the Store Einstein Bots conversation data setting on the Bot Overview page.

To learn more about compliance, visit the Salesforce Trust site or the Einstein Platform Compliance site.

Encrypt MlIntentUtteranceSuggestion (bot training data) in Shield.
1. You can set up Shield Platform Encryption using the instructions in Trailhead: Set Up and Manage Shield Platform Encryption.
2. After you enable it, from Setup, in the Quick Find box, enter Encryption Policy, click Encrypt Fields, and then click Edit to check the Utterance field.
From the Bot Builder, review the utterances inside each dialog intent for personally identifiable information (PII). Modify or remove any utterances containing PII.