Salesforce

Type: company (listed; enterprise application and data platform vendor) Sector: CRM / enterprise applications; data platform (Data 360, Informatica, Tableau, MuleSoft); agentic AI (Agentforce); from Sep 2026 also positioning an enterprise “AI Control Plane” First seen: 2026-09-10 (S-2026-09-10-salesforce-enterprise-ai-harness-control-plane) Last updated: 2026-09-17

Created 2026-09-17 from S-2026-09-10-salesforce-enterprise-ai-harness-control-plane (daily AI-governance vendor-intelligence scan; Salesforce newsroom story fetched in full), adding to two Dreamforce-week sources already ingested by the data-governance scan — S-2026-09-15-salesforce-aws-dreamforce-informatica-headless and S-2026-09-15-salesforce-google-cloud-dreamforce — so the schema’s 2+-source trigger is met (three sources). All three are Salesforce-authored; every capability, availability and customer statement on this page is vendor-asserted and not independently verified. Scope note: this page tracks Salesforce’s AI-governance- and data-governance-relevant moves, not the company generally.

Snapshot

Salesforce is a CRM and enterprise-application vendor that, through the Informatica, MuleSoft and Tableau acquisitions and its Data 360 platform, now also owns a substantial data-governance estate, and through Agentforce a large agent-building platform. In September 2026 it drew these together as a “Trusted Enterprise AI Harness” — six “trusted capabilities” (context, agency, action, governance, security, models) — and announced a new “AI Control Plane” intended to “discover and register agents and AI capabilities, establish identity and policy, manage lifecycle, evaluate performance, observe behavior and outcomes, and control cost — across Salesforce and third-party AI”, delivered headlessly (MCP, APIs) into Claude, Slack, Teams and Agentforce; the foundations exist today, the new capabilities and unified experience roll out “in early fiscal FY28” (from ~Feb 2027), pricing undisclosed [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane]. In the same week it extended Data 360 zero-copy access to AWS Glue/S3 Iceberg, Aurora, RDS and SageMaker Lakehouse, expanded Informatica’s headless MCP servers on Amazon Bedrock AgentCore and Amazon Quick, and claimed that its Trust Layer with Bedrock Zero Data Retention “for regulated industries … brings HIPAA, PCI, SOC 2, and ISO 42001 compliance and full audit trails built in” [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless]; and announced Hyperforce running natively on Google Cloud (North America GA November 2026; “phased feature and regional expansion in 2027, including Germany”) with Gemini Enterprise headless integration and Tableau MCP row-level security “enforced with every agent query” [S-2026-09-15-salesforce-google-cloud-dreamforce]. For this wiki Salesforce therefore matters as a seventh candidate holder of the enterprise agent register and as an owner of data-governance tooling (Informatica) now being exposed to third-party agents [inference].

Positions / Claims they advance

  • Proprietary context, not model choice, is the durable differentiator. “Models will continue to change, and intelligence will increasingly be available everywhere. What will differentiate an enterprise is the trusted, proprietary context it brings to that intelligence” — Rohan Kumar [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • Open-ended reasoning must be bound by deterministic enterprise controls. “AI reasoning can be open-ended, but enterprise execution often cannot be”; Trusted Agency combines “flexible AI reasoning with deterministic controls where certainty is required” [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • Governance and security are harness pillars. Trusted Governance = “lineage, quality, guardrails, and controls” over the data, metadata, policies and processes AI relies on; Trusted Security = “identity, permissions, privacy, data protection, and runtime security to what AI can access and what agents are allowed to do” [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • A cross-vendor AI Control Plane. Discovery/registration, identity and policy, lifecycle, evaluation, observation and cost control “across Salesforce and third-party AI”; role-specific views for data, security and builder personas [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • Headless / composable delivery (“AIforce”). Capabilities exposed via MCP, APIs, Skills and Plug-ins into Claude, Slack, Microsoft Teams and Agentforce [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane]; Informatica headless MCP servers (platform administration, catalog discovery/enrichment, data-quality scores, master-data retrieval) GA on Amazon Bedrock AgentCore and Amazon Quick [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless].
  • Compliance-by-platform claims for regulated industries. Bedrock model choice with Zero Data Retention plus the Trust Layer “brings HIPAA, PCI, SOC 2, and ISO 42001 compliance and full audit trails built in” — a vendor assertion; the scope of the ISO 42001 claim (certification of which entity/service) is not stated [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless].
  • Infrastructure change without trust change. “What changes here is the infrastructure underneath our customers, not the trust they’ve built with us” — Meir Amiel, on Hyperforce on Google Cloud, with “the same security, compliance, and resilience standards” [S-2026-09-15-salesforce-google-cloud-dreamforce].
  • Availability discipline. “Customers should base purchasing decisions on products and services currently available” — the Control Plane is announced, not shipped [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].

Relationships

  • relates-to → AI Governance Platforms — application-platform entrant to the cross-vendor agent-control-plane cluster; longest stated lead time (FY28) [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • relates-to → Agentic Data Access Governance — Data 360 zero-copy expansion and Informatica headless MCP servers expose governed data and catalogue functions to third-party agents [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless].
  • parent-of → Informatica — owned data-management/governance vendor whose MCP servers are a component of the harness [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless].
  • partners-with → AWS — Bedrock model choice, AgentCore/Quick integrations, Marketplace distribution in 33 countries [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless].
  • partners-with → Google Cloud — Hyperforce on Google Cloud; Gemini Enterprise and BigQuery Iceberg REST Catalog integration; 2027 Germany expansion [S-2026-09-15-salesforce-google-cloud-dreamforce].
  • partners-with → Anthropic — Claude named as a surface into which harness capabilities are exposed [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • competes-with → IBM / Dataiku / Archer — each also claims a cross-platform agent register (watsonx Orchestrate discovery; Agent Management; Evolv) [S-2026-09-03-ibm-orchestrate-cross-platform-discovery-agentops-ga][S-2026-09-12-dataiku-agent-management-ga-slip][S-2026-09-15-archer-evolv-ai-compliance][inference].

Tracked changes

  • 2026-09-10 — Trusted Enterprise AI Harness and AI Control Plane announced ahead of Dreamforce; rollout “early fiscal FY28”; Rocket Mortgage CTO quoted [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane].
  • 2026-09-15 — AWS collaboration expanded: Data 360 zero-copy to Glue/S3 Iceberg, Aurora, RDS, SageMaker Lakehouse; Informatica headless MCP servers GA on Bedrock AgentCore and Amazon Quick; Trust Layer “ISO 42001 compliance” claim [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless].
  • 2026-09-15 — Google Cloud partnership expanded: Hyperforce on Google Cloud (NA GA Nov 2026; Germany 2027), Gemini Enterprise headless integration, Tableau MCP row-level security [S-2026-09-15-salesforce-google-cloud-dreamforce].

Open Questions

  • Which AI Control Plane capabilities exist today versus FY28, and will its agent register import from or export to the hyperscaler, IAM, GRC and data-science registers a bank already runs — or claim system-of-record status? [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane]
  • No regulation or standard is named in the harness story; the AWS story’s “ISO 42001 compliance … built in” claim is unspecified — which entity holds the certificate, for what scope, and does it extend to customer-built agents? [S-2026-09-15-salesforce-aws-dreamforce-informatica-headless]
  • Is any EU/UK bank or insurer a live reference for Agentforce governance or the Control Plane? Rocket Mortgage is the only customer quoted on the harness. [S-2026-09-10-salesforce-enterprise-ai-harness-control-plane]
  • Under DORA, does a Control Plane governing “third-party AI” make Salesforce an ICT third party for agent governance itself, and what are the exit/portability terms for the register? [inference]
  • EU data residency: Hyperforce on Google Cloud reaches Germany only in 2027; what is the residency story for Control Plane telemetry and agent logs in the interim? [S-2026-09-15-salesforce-google-cloud-dreamforce][inference]

Sources