If you’re using Salesforce Foundations, you’re responsible for your Health Insurance
Portability and Accountability Act (HIPAA) compliance. Manage your compliance by enabling only
HIPAA-ready Salesforce features and implementing them securely.
Required Editions
These features offered in Salesforce Foundations aren’t covered by the Business Associate
Addendum (BAA): Einstein Activity Capture, Salesforce Inbox, and Einstein Send Time
Optimization (STO). These features must remain disabled for the purposes of HIPAA compliance.
You can confirm and update the status of these features in Setup.
Salesforce Foundations and Agentforce
While Agentforce is built on a HIPAA-compliant base, you must configure agents
with security in mind in order to maintain compliance. For more about building agents that
meet your individual security requirements, see the Agentforce documentation.
