Salesloft: security & AI-training scorecard
salesloft.com ↗ · Sales engagement · Last checked Oct 16, 2026
Does Salesloft train AI on customer data?
Unclear“The Sub-processors we utilize to provide our generative AI-powered services do not use customer data (as defined by the Salesloft Master Subscription Agreement) to train their AI models, except where a customer has given us permission or instructions to do so, including customer-specific models (where the model is trained for, and available only to, a specific customer)”
Note: Statement covers AI sub-processors; no explicit statement found on Salesloft's own model training.
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Salesloft Platform - 2026 SOC 2 Type 2 - Report”
ISO/IEC 27001
Certified information security management system.
Yes
“ISO 27001”
Note: Badge is on the combined 'Clari/Salesloft' trust center; featured certificate is labeled 'Clari ISO 27001 Certificate'. Confirm Salesloft-platform scope before publishing as Salesloft-specific.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
Not verified from vendor-owned sources
Note: No HIPAA/BAA statement found in fetched sources.
No vendor source found as of check date.
GDPR DPA
Data Processing Agreement/Addendum for personal data.
Will enter into a DPA
“Will enter into a DPA”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
Unclear
“The Sub-processors we utilize to provide our generative AI-powered services do not use customer data (as defined by the Salesloft Master Subscription Agreement) to train their AI models, except where a customer has given us permission or instructions to do so, including customer-specific models (where the model is trained for, and available only to, a specific customer)”
Note: Statement covers AI sub-processors; no explicit statement found on Salesloft's own model training.
Data retention
What the vendor publishes about how long customer data is kept.
Return/delete on request within 90 days after term
“Upon request made by Customer within ninety (90) days following the expiration or termination of the Subscription Term, Salesloft will return or delete the Personal Data, except as required to be retained by applicable laws.”
Subprocessor list
Where the vendor lists third parties that process customer data.
“Subprocessors list available”
Other notes
Additional context from vendor sources.
Trust center publishes updates on the 2025 Drift security incident
“On August 28, 2025, Salesloft retained Mandiant to investigate the compromise of the Drift platform and its technology integrations.”
All sources checked (3)
Fetched on Oct 16, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Salesloft's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.