Set up Einstein Trust Layer
Configure the Einstein Trust Layer to align with your organizational privacy and security policies and requirements.
Required Editions
| Available in: Enterprise, Performance, and Unlimited Editions with an Einstein for Sales, Einstein for Platform, Einstein for Service, Einstein 1 Service, or Einstein GPT Service add-on. To purchase add-ons, contact your Salesforce account executive. |
Note Before you can set up the Einstein Trust Layer, you must enable Einstein Generative AI and configure Data Cloud in your org. Data Cloud is required to ensure that the Einstein Trust Layer functions correctly and protects your data. For more support, contact your Salesforce Account Executive (AE).
These settings are applied to your Salesforce org.
- From Setup, in the Quick Find box, enter Einstein, and then select Einstein Trust Layer. Trust Layer setup page includes two tabs, one for LLM data masking and one for content safety and security.
-
Data Masking: Data Masking is enabled by default. On the Data Masking tab, enable data
masking if it’s turned off to allow the Einstein Trust Layer to detect and mask sensitive
data.To understand the different options available for data masking, review the content at
the top of the page. Individual entities or categories can be turned off or turned on. It
can take up to a few minutes for the changes to take effect.
Data masking for LLMs is disabled for agents. See Data Masking and Agents. For embedded generative AI features, such as Einstein Service Replies, Einstein Work Summaries data masking is available, and you can configure it in Einstein Trust Layer setup.
See Also
Did this article solve your issue?
Let us know so we can improve!

