Hi there,
we have recently subscribed to a contact DB from an institution which we'd like export onto our SF DB.
They want us and our CRM Provider (Salesforce) to sign their Confidentiality Agreement.
Saleforce declines to undersign defining:
"8. CONFIDENTIALITY
8.1. Definition of Confidential Information. “Confidential Information” means all information disclosed by a party (“Disclosing Party”) to the other party (“Receiving Party”), whether orally or in writing, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Your Confidential Information includes Your Data; Our Confidential Information includes the Services and Content; and Confidential Information of each party includes the terms and conditions of this Agreement and all Order Forms (including pricing), as well as business and marketing plans, technology and technical information, product plans and designs, and business processes disclosed by such party. However, Confidential Information does not include any information that (i) is or becomes generally known to the public without breach of any obligation owed to the Disclosing Party, (ii) was known to the Receiving Party prior to its disclosure by the Disclosing Party without breach of any obligation owed to the Disclosing Party, (iii) is received from a third party without breach of any obligation owed to the Disclosing Party, or (iv) was independently developed by the Receiving Party.
8.2. The Receiving Party will use the same degree of care that it uses to protect the confidentiality of its own confidential information of like kind (but not less than reasonable care) to (i) not use any Confidential Information of the Disclosing Party for any purpose outside the scope of this Agreement and (ii) except as otherwise authorized by the Disclosing Party in writing, limit access to Confidential Information of the Disclosing Party to those of its and its Affiliates’ employees and contractors who need that access for purposes consistent with this Agreement and who have signed confidentiality agreements with the Receiving Party containing protections not materially less protective of the Confidential Information than those herein. Neither party will disclose the terms of this Agreement or any Order Form to any third party other than its Affiliates, legal counsel and accountants without the other party’s prior written consent, provided that a party that makes any such disclosure to its Affiliate, legal counsel or accountants will remain responsible for such Affiliate’s, legal counsel’s or accountant’s compliance with this “Confidentiality” section. Notwithstanding the foregoing, We may disclose the terms of this Agreement and any applicable Order Form to a subcontractor or Non-SFDC Application Provider to the extent necessary to perform Our obligations to You under this Agreement, under terms of confidentiality materially as protective as set forth herein.
8.3. Compelled Disclosure. The Receiving Party may disclose Confidential Information of the Disclosing Party to the extent compelled by law to do so, provided the Receiving Party gives the Disclosing Party prior notice of the compelled disclosure (to the extent legally permitted) and reasonable assistance, at the Disclosing Party's cost, if the Disclosing Party wishes to contest the disclosure. If the Receiving Party is compelled by law to disclose the Disclosing Party’s Confidential Information as part of a civil proceeding to which the Disclosing Party is a party, and the Disclosing Party is not contesting the disclosure, the Disclosing Party will reimburse the Receiving Party for its reasonable cost of compiling and providing secure access to that Confidential Information"
The institution says: "We're sorry but if you can’t get this third-party agreement signed, you may not disclose the data to Salesforce."
Any idea, any advice how we can proceed?
Thanks
1 réponse
A couple thoughts - just because you are uploading data into your CRM does not mean you are disclosing it to Salesforce. You have to grant access on a time-limited basis for SFDC to access your org.
I would not expect Salesforce to sign anything additional as they already have their MSA agreement and policies. Perhaps you could point your data provider to SFDC's existing agreements and policies.
3rd - seems a bit odd for the db provider to be requesting this in the first place. Haven't heard of that before.
