How a Data 360 Clean Room Works

Clean rooms provide a secure environment for parties to collaborate on data without exposing personal information. You specify which data you want to share and under which terms. All data is encrypted and never leaves the clean room. Data 360 uses strict privacy and security measures to prevent your collaborators from viewing sensitive data while giving you full transparency into how your metadata is accessed and queried.

You can collaborate in a clean room as a provider or as a consumer. To collaborate, both parties map their data to the clean room with the guidance of a collaboration template. The required and optional data fields are predefined in the template, along with the collaboration terms, such as the permitted queries, which party runs the queries, and which party receives the query results.

Data 360 clean rooms use data sharing between Data 360 orgs to securely associate metadata and allow federated querying of configured datasets. If you don’t have your data in Data 360, you can either ingest your data or use Zero-copy to associate your metadata to a clean room. When a query is run in a clean room, Data 360 applies the required privacy measures to the data. The query results, which are aggregated to preserve privacy, are stored in data model objects (DMOs), and you can create reports from them.

Collaborating in a Clean Room

Here’s the sequence of events for a clean room collaboration.

Note You need a Data 360 Developer org to create or deploy a clean room package.

• Here's how to configure clean rooms in Data Cloud Setup:
  • Provider: Create a clean room package. The package can contain a custom or Salesforce-provided collaboration template. A custom template can support multiple use cases.
  • Provider: Publish the clean room package on AppExchange.
  • Consumer: Deploy the package from AppExchange. If the provider is a trusted partner, you can allowlist the provider to access supported use cases without deploying a package.
• Here's how to use clean rooms in the Clean Room tab in Data 360:
  • Consumer and provider: Create mappings between the attributes required for the use case and the corresponding attributes in each party’s dataset. You can create mapped templates in advance or map data during the collaboration creation and invitation acceptance. Both parties must complete required mappings before the collaboration becomes active.
  • Consumer: Create a collaboration for a specific use case and collaboration query, and save the collaboration. When you save the collaboration, the provider automatically receives an invitation.
  • Provider: Accept the collaboration invitation. After you accept, the collaboration status changes to Active.
  • Provider or consumer: Run queries on the combined dataset according to the roles and permissions defined for the use case in the collaboration template. Collaboration results are stored in a DMO or processed as defined in the collaboration template. Permitted parties can view the results and create reports from them.

• Clean Room Providers
  Providers are publishers or companies that own a platform and can offer access to data or advertising space to other companies. Data 360 Clean Rooms enable providers to collaborate using Salesforce Data 360 clean rooms or AWS clean rooms. 
• Clean Room Consumers
  Consumers are advertisers seeking insights from providers’ data to find appropriate audiences for their products. Consumers can initiate a clean room by deploying a clean room package from AppExchange or by allowlisting a provider. If you allowlist a partner, you don’t need the clean room package to initiate a clean room collaboration. Use the Salesforce-provided collaboration template to initiate the collaboration.