---
schema_version: "1"
id: 317a2bcd15f7ec0c4f0cb56ce5078ec53f80ca2f7e4824ecc6b37bbebac1690a
title: Consent Management for Heroku
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/consent_management_heroku.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.consent_management_heroku.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5aca98e6a09295edd5b265145d7836d351e58009c82a2a4731099939612937ae
description: Honor your customers’ wishes to receive only specific forms of contact from your company or opt-out of certain types of data-sharing. We provide details to help you determine the best way to comply with the data protection and privacy regulations that apply to your company.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Consent Management for Heroku

Honor your customers’ wishes to receive only specific forms of contact from your company or opt-out of certain types of data-sharing. We provide details to help you determine the best way to comply with the data protection and privacy regulations that apply to your company.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: All Editions</td></tr></tbody></table>

Many data protection and privacy regulations require you and your company to honor people’s requests about how you use their data. We’ve listed a few of the regulations that are important to many companies collecting and processing their customers’ data.

- General Data Protection Regulation (GDPR), European Union
- California Consumer Privacy Act (CCPA), United States
- Canada’s Anti-Spam Law (CASL)

If you have customers or users who request specific methods of contact from your company, review this common request and the related procedures.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:33.33333333333333%">
          <col style="width:33.33333333333333%">
          <col style="width:33.33333333333333%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d20692e57">Common Customer Request</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d20692e59">Actions to Consider</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d20692e61">Things to Consider</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e57 ">I want to be able to request and track our users’ consent to store their
              personal data and marketing, data processing, and data deletion preferences.</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e59 ">Heroku Services give you the ability to fully manage the development, design,
              and functionality of applications you deploy. Using Heroku Services, you can design
              and develop application-layer functionality that allows your organization to obtain
              and track consent and preferences for your application’s end users.</td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e61 ">Work with your legal team to design a consent management system that works for
              your specific customer needs.</td>
          </tr>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e57 ">I want to utilize third-party add-ons from the Heroku Elements Marketplace to
              store and/or manage our users’ personal data.</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e59 ">Salesforce Heroku provides the ability for your organization to deploy
              third-party add-ons from the Heroku Elements Marketplace to extend and enhance
              capabilities of applications your organization deploys to Heroku Services.</td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e61 ">Work with your legal team to ensure that you have the appropriate contractual
              terms in place with the provider of the add-on. Also make sure that you have the
              right processes to help manage your GDPR compliance obligations when using the
              add-on.</td>
          </tr>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e57 ">How do I minimize our users’ personal data from being output to logs generated
              by applications our organization deploys to Heroku Services?</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e59 ">
              <p>Salesforce Heroku aggregates <a href="https://devcenter.heroku.com/articles/logging" target="_blank">logs</a> from your application’s running
                processes, system components, and backup services as described in the documentation
                into a single channel known as Heroku Logplex.</p>
              <div>
                <p>Your organization can minimize
                  transmission of sensitive data into the Heroku Logplex log stream by:</p>
                <ul>
                  <li>Turning off logging for your Heroku Postgres database by using the
                    --block-logs option when creating the database.</li>
                  <li>Excluding such data in URLs or query strings submitted to web
                    processes.</li>
                  <li>Not configuring application processes to print such data to stdout.</li>
                </ul>
              </div>
              <p style="margin-bottom:0;">Shield Private Spaces also includes the feature <a href="https://devcenter.heroku.com/articles/private-space-logging" target="_blank">Private Space Logging</a> which enables
                you to configure log capture at the space level instead of the app level. This
                feature allows your organization to forward all log events from applications and
                Heroku system services in the space to a single external log capture destination
                as described in the documentation.</p>
            </td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e61 ">
              <p>If the Shield Private Spaces feature Private Space Logging is utilized, then
                logs are not stored within Heroku Services.</p>
              <p style="margin-bottom:0;">If a third-party add-on is utilized to
                store logs, then your organization needs to work with the add-on provider to
                determine steps to minimize your users’ personal data from being captured by the
                third-party add-on. Work with your legal team to ensure that you have the
                appropriate contractual terms in place with the provider of the add-on. Also make
                sure that you have the right processes to help manage your GDPR compliance
                obligations when using the add-on.</p>
            </td>
          </tr>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e57 ">A customer in California sent us an opt-out request so that we don’t refer to
              or share her personal data.</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e59 ">Work with your developer on tracking customers’ consent and deleting their
              personal data.</td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d20692e61 ">
              <p>Consult your legal team about designing a consent management system.</p>
              <p style="margin-bottom:0;">Develop
                application-layer functionality that fulfills consent management and data deletion
                requests from your applications.</p>
            </td>
          </tr>
        </tbody>
      </table>