You are here:
Set Up Compliance BCC in Unified Messaging
Send a blind carbon copy (BCC) of every outgoing email to a designated address and control whether individual flows can override the setting. Each email sent to a carbon copy (CC) and BCC recipient consumes a Salesforce Message Credit.
Required Editions
| Available in:Lightning Experience |
| Available in:Salesforce Enterprise and Unlimited Editions with Marketing Cloud Next Growth Edition or Advanced Edition |
Compliance BCC is a client-side convenience, not a guaranteed compliance control. Review these points before you turn it on.
- You can set only one compliance BCC address per org.
- Secure the compliance mailbox the same way that you'd secure any system that receives sensitive customer communications, such as restrict access and monitor for unusual activity.
- The compliance BCC address doesn't represent a person, so it's excluded from consent checks.
- Opens, clicks, unsubscribe requests or other activity that comes from a BCC email are processed like they came from the original email recipient.
- Salesforce can't prevent one-click unsubscribe requests. If the compliance mailbox is compromised, unsubscribe links in the archived emails can get triggered from the inbox.
- A copy of the email isn't saved by Salesforce. If you need an audit-ready record, confirm receipt on your email system independently.
- From Setup, in the Quick Find box, enter Unified Messaging, and then select Compliance BCC.
-
Enter the BCC email address.
Salesforce doesn't validate the email address, so make sure that the email address is correct.
-
Turn on BCC.
It can take up to 1 hour for emails to include the BCC address.
-
(Optional) To let marketers turn off BCC for individual email sends in a flow, select
Allow Overrides.
Marketers can't change the BCC address. They can only turn BCC off for a particular send in Flow Builder. If you turn off Allow Overrides, flows revert to the org-level BCC setting after the change propagates. If overrides aren't allowed, you can see the setting but can't change it.
The Email Engagement DMO now includes a BCC address attribute, which stores the BCC address included on the recipient's email. The system also logs an additional Engagement Email Event for the BCC send itself. The BCC address isn't stored in the BCC field, it's stored in the Sendtime Email Address field instead.
If the Compliance BCC address bounces, future sends will not include a send to the BCC address, but an email will be delivered to the intended recipient. The system sends a not sent event to the Engagement Email DMO, with the BCC address as the Sendtime Email Address.
In Flow Builder, marketers can turn off BCC in the Send Email Message invocable action. If BCC is turned on at org-level, it's turned on for flows. If the override setting is also turned on, marketers can turn it off for specific send.
Active flows keep original settings until finished and event-triggered flows require a restart to pick up the change. See Send Email Message Marketing Flow Element.
