Einstein Activity Capture Security Guide - Salesforce

1 Einstein Activity Capture SecurityGuideSalesforce, Spring 22 @salesforcedocsLast updated: January 26, 2022 Copyright 2000 2022 , inc. All rights reserved. Salesforce is a registered trademark of , inc.,as are other names and marks. Other marks appearing herein may be trademarks of their respective Activity Capture .. 1 Einstein Activity Capture System Requirements.. 2 Access and Authentication.. 4 Allowing Network Access When Using Einstein Activity Capture with a MicrosoftExchange Server.. 5 Exchange Web Sevices (EWS) and API.. 7 Einstein Activity Capture Data Flow.

2 8 How Data Is Stored and Used.. 9 Encryption.. 11 Data Privacy.. 12 Data Storage and Retention.. 14 Einstein Activity CAPTUREEDITIONSA vailable in: LightningExperienceAvailable with Sales Cloudin: Essentials, Professional,Enterprise, Performance,and Unlimited EditionsAvailable with Sales CloudEinstein, which is availablefor an extra cost in:Enterprise, Performance,and Unlimited EditionsAvailable with Inbox, whichis available for an extra costin: Professional, Enterprise,Performance, andUnlimited EditionsAvailable with High VelocitySales, which is available foran extra cost in.

3 Enterprise,Performance, andUnlimited EditionsAvailable with RevenueIntelligence, which isavailable for an extra costin: Enterprise and UnlimitedEditionsEinstein Activity Capture is a productivity-boosting tool that helps keep data between Salesforceand your email and calendar applications up to date. To keep data up to date between applications, Einstein Activity Capture focuses on three types of data emails, events, and Activity Capture also includes tools to summarize sales activities that were added toSalesforce manually and by Einstein Activity Capture .

4 The Activities dashboard breaks down datawith various charts and filters. Activity Metrics lets you use Activity data with Salesforce platformcapabilities, such as triggers and list information, including setup steps, limitations, and details about how the feature works,is available in Salesforce : In Salesforce documentation, the term Capture refers to when data that is gatheredfrom the connected Microsoft of Google account and added to Salesforce . The captured dataisn t stored in Salesforce and isn t used to create Salesforce records. For example, captureddata is added to the timeline of related Salesforce records and is used to generate insightsand engagement Activity Capture SYSTEM REQUIREMENTSEDITIONSA vailable in: LightningExperienceAvailable with Sales Cloudin: Essentials, Professional,Enterprise, Performance,and Unlimited EditionsAvailable with Sales CloudEinstein, which is availablefor an extra cost in:Enterprise, Performance,and Unlimited EditionsAvailable with Inbox, whichis available for an extra costin.

5 Professional, Enterprise,Performance, andUnlimited EditionsAvailable with High VelocitySales, which is available foran extra cost in: Enterprise,Performance, andUnlimited EditionsAvailable with RevenueIntelligence, which isavailable for an extra costin: Enterprise and UnlimitedEditionsBefore you set up Einstein Activity Capture , confirm that your Google G Suite account or Microsoft Exchange-based server meet the system company must be using G Suite by Google Cloud. Einstein Activity Capture supports Basic,Business, and Enterprise editions.

6 Einstein Activity Capture offers the user-level connection methodfor companies working from Google. Data is authorized to be fetched from users email serviceusing the OAuth Exchange Online with Office 365 Einstein Activity Capture offers three connection methods for companies working from MicrosoftExchange Online with Office Settings toEnableAuthentication MethodConnection MethodExchange Web Services (EWS)on an SSL connectionData is authorized to befetched from users emailservice using the OAuth accountMicrosoft Exchange 2019, 2016, or 2013 Einstein Activity Capture offers two connection methods for companies working from MicrosoftExchange 2019, 2016, or Settings toEnableAuthentication MethodConnection MethodExchange Web Services (EWS)

7 On an SSL connectionMake sure your server supportsBasic Authentication is authorized to befetched from users emailservice using accountMake sure to allow thenecessary network Exchange Hybrid DeploymentsFor companies working from a combination of Microsoft Exchange Online and Microsoft Exchange on-premises severs, Einstein ActivityCapture only supports user-level connections for the Capture Activity Capture System RequirementsACCESS AND AUTHENTICATIONA ccessTo use Einstein Activity Capture , users must be assigned to one of the permission sets that includes Einstein Activity Capture .

8 For details,see Select Who Can Use Einstein Activity Capture in Salesforce a user s events and contacts to be synced, an admin must also add the user to an Einstein Activity Capture configuration with syncingenabled. For details, see Create a Configuration for Einstein Activity Capture in Salesforce ProvisioningWhen Einstein Activity Capture is enabled in an org, a corresponding Einstein Activity Capture org is created on Salesforce s AmazonWeb Service (AWS) servers. The integration between Salesforce and AWS is authenticated through an encrypted private key.

9 WhenEinstein Activity Capture makes API calls to AWS, the org-specific key is choices of how to connect and authenticate users email and calendar application depend on which email and calendar applicationyou use. For details about the available connection and authentication methods, see the System Requirements all cases, the connection allows Salesforce to: Read, send, delete, and manage users email. View the files in users Google drive, if applicable. Manage users contacts. Manage users NETWORK ACCESS WHEN USING EINSTEINACTIVITY Capture WITH A MICROSOFT EXCHANGE SERVERWhen setting up Einstein Activity Capture with a Microsoft Exchange on-premises server (2019, 2016, or 2013), make sure that you allowthe necessary network in: Lightning ExperienceAvailable with Sales Cloud in: Essentials, Professional, Enterprise, Performance, and Unlimited EditionsAvailable with Sales Cloud Einstein , which is available for an extra cost in.

10 Enterprise, Performance, and Unlimited EditionsAvailable with Inbox, which is available for an extra cost in: Professional, Enterprise, Performance, and Unlimited EditionsAvailable with High Velocity Sales, which is available for an extra cost in: Enterprise, Performance, and Unlimited EditionsInbound ConnectionsIf an IP or VPN restricts the Exchange Web Services (EWS) endpoint, add the following addresses to the allowlist. This method ensuresthat your Exchange server is visible to your Salesforce instance is located in EuropeIf your Salesforce instance is locatedoutside of Europe more information about Salesforce IP addresses that aren t specific to EWS or Einstein Activity Capture , see Salesforce IP Addressesand Domains to ConnectionsIf you have restrictions on Exchange outbound connections, you need to allow outbound access to the following domains.