Skip to main content

Data Compliance overview

The Data Compliance module keeps your backups compliant with data-privacy regulations such as GDPR. It records data-subject requests — "forget this person" or "correct this value" — and bluefactory honors them automatically whenever data is restored.

The problem it solves​

Backups are copies. When a person exercises their right to be forgotten, deleting them from Salesforce isn't enough — their data still lives in every snapshot. Rewriting history inside backups would undermine their integrity, so bluefactory takes the approach regulators recognize: the request is recorded once, and applied every time data comes back out. A forgotten record never returns through a restore; a rectified field always comes back with its corrected value.

The two request types​

  • Forget — excludes a record from any future restore. Use it for right-to-be-forgotten (erasure) requests.
  • Rectify — rewrites a specific field of a specific record with a corrected value during any future restore. Use it for rectification requests.

Creating requests​

From Data Compliance in the sidebar you can create requests three ways:

  1. Forget request — pick the org and object (loaded live from your org), enter the 18-character record Id, and an optional comment for the audit trail.

  2. Rectify request — pick the org, object, and field, enter the record Id and the corrected value.

  3. Bulk import — upload a CSV of up to 2,000 requests at once for one org. Sample files are downloadable from the page. Required columns:

    • forget rows: record_id, action, object_name
    • rectify rows: record_id, action, object_name, field, new_field_value

    Use 18-character Salesforce record Ids. If the file is malformed, nothing is imported — you'll never end up with a half-applied file.

[SCREENSHOT REQUIRED: Data Compliance list page with the Forget, Rectify, and Bulk import actions]

Managing requests​

The list page shows every recorded request with who created it and when. Any team member with access can create requests; only account owners can delete them.

note

Data Compliance requests apply to future restores. They do not delete data from your live Salesforce org — use Purge for that — and they do not rewrite the snapshots themselves.