> Salesloft GDPR analysis: prospect data processing, email tracking, US data transfers, EU residency option, DPA and compliance steps for European teams. > > Canonical: https://www.flowconsent.com/en/services/marketing/salesloft Marketing # Salesloft Marketing · [Official website](https://salesloft.com) Salesloft is a US sales engagement platform widely used by B2B sales teams to orchestrate email, call and LinkedIn cadences. It processes prospect contact data and tracks email opens, clicks and replies through pixels and link rewriting. Because it covers cross border prospecting and behavioural tracking, it raises GDPR, ePrivacy and German UWG obligations for European customers. [Block Salesloft until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 3 - Third-party domains 5 - Servers United States (Salesloft, Inc., Atlanta) with EU region available Overview ## What does Salesloft do? ## What is Salesloft Salesloft is a sales engagement platform founded in Atlanta in 2011. It is one of the most widely adopted tools by B2B sales teams to orchestrate multistep cadences combining email, calls, LinkedIn touches, meetings and tasks. Salesloft also provides conversation intelligence (call and meeting recording with AI summaries), pipeline analytics and forecasting. In 2022 Salesloft was acquired by Vista Equity Partners. ## Data processed by Salesloft Salesloft processes prospect personal data uploaded by the user or synced from a CRM (name, professional email, phone, company, job title, custom fields), the content of sent and received emails, call logs and recordings (when activated), meeting notes, behavioural signals (opens, clicks, replies) collected via email pixels and rewritten URLs, and the Salesloft user account information. It also integrates with CRMs (Salesforce, HubSpot), enrichment vendors and conversation intelligence platforms. ## GDPR, ePrivacy and UWG implications Cold outreach is regulated by the GDPR (any contact data is personal data) and by the ePrivacy Directive (electronic communications). For B2C, prior opt in consent is required. For B2B, several EU authorities accept legitimate interest under strict conditions, while the German UWG generally requires soft opt in or a clear business relationship. Email pixels and rewritten links fall under Art. 5(3) ePrivacy and call recording requires both party notice and a separate lawful basis. ## US hosting and EU residency Salesloft hosts production data on AWS in the United States by default. An EU data residency option is available for enterprise customers and should be activated for European deployments. Transfers to the United States are governed by Standard Contractual Clauses under Art. 46(2)(c) GDPR and require a Transfer Impact Assessment that takes FISA 702 into account. ## How to deploy Salesloft compliantly Compliance checklist: assess the lawful basis country by country (UWG in Germany is stricter than CNIL in France); document the legitimate interest assessment; send the Art. 14 GDPR notice in the first message; include a one click unsubscribe in every email; configure email tracking off for sensitive recipients; activate EU residency when available; sign the Salesloft DPA and the SCCs; obtain explicit consent for call recording where required; run a DPIA for large scale outreach; update privacy policy and prospecting notice with Salesloft and the data processed. Compliance ## Salesloft and the GDPR Salesloft is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for B2C; legitimate interest (Art. 6(1)(f) GDPR) may apply to B2B prospecting under a strict Legitimate Interest Assessment - Risk level high - Applicable regulations GDPR, ePrivacy Directive (Cookie Law), CCPA, CAN SPAM, German UWG ### Impact assessment (DPIA) Salesloft processes uploaded prospect data (name, email, phone, company, role, custom fields), interaction history (sent and received emails, call logs, recordings when activated, meeting outcomes), behavioural signals (opens, clicks, replies) collected via email pixels and rewritten links, and integration data from connected CRMs. Key DPIA points: (1) cold outreach raises ePrivacy obligations that differ by EU country (UWG in Germany requires soft opt in for unsolicited email); (2) email pixels and rewritten links fall under Art. 5(3) ePrivacy in most member states; (3) US hosting by default triggers SCCs and a Transfer Impact Assessment, EU residency is available for enterprise tiers; (4) call recording engages additional rules and requires both party notice; (5) lead scoring and automated cadence triggers may activate Art. 22 GDPR obligations when decisions have significant effects; a DPIA under Art. 35 GDPR is recommended for large scale outreach programs. ### Sample text for your banner > We use Salesloft to manage our sales engagement with you, including emails, calls and meetings. Salesloft tracks whether you open or click on our emails and may record calls where law permits. Your professional contact data, our exchanges and behavioural signals are processed by Salesloft, Inc. on infrastructure located in the United States (or in the European Union if EU residency is enabled). You can object at any time by replying to the email or contacting us. Cookies and trackers ## What Salesloft sets and contacts - Tracking method Web SDK (sales engagement tracking), email tracking pixel and link rewriting - Server location United States (Salesloft, Inc., Atlanta) with EU region available - Data transferred outside the EU Salesloft processes data on AWS infrastructure in the United States by default. An EU data residency option is available for enterprise customers. Transfers to the United States are governed by Standard Contractual Clauses under Article 46(2)(c) GDPR and require a Transfer Impact Assessment. ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------------------------ | -------------------------- | --------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Salesloft email tracking pixel | Tracking pixel (1x1 image) | No persistent storage | Invisible image inserted in outbound emails; loaded from a Salesloft domain when the recipient opens the email, used to record opens and infer geolocation from request IP. | | Salesloft link redirect | URL redirection | No persistent storage | Outbound links rewritten through a Salesloft redirect domain to attribute click events to the campaign and prospect. | | \_salesloft\_session | HTTP first party cookie | Session | Session cookie set on the Salesloft web application for authenticated users. | ### Third-party domains contacted (5) - `app.salesloft.com` - `sdr.salesloft.com` - `click.salesloft.com` - `open.salesloft.com` - `static.salesloft.com` Questions ## Frequently asked questions about Salesloft Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies or trackers does Salesloft use? Salesloft uses email tracking pixels and link rewriting to record opens and clicks. The Salesloft web application sets first party session cookies for the authenticated user, and may use third party JavaScript for product analytics and support chat. ### Is user consent required for Salesloft outreach? Yes for B2C; opt in is mandatory under Art. 13 ePrivacy. For B2B, legitimate interest may apply in France, Spain and the UK under conditions; in Germany the UWG generally requires soft opt in or an existing business relationship. ### What is the legal basis for processing? Consent (Art. 6(1)(a) GDPR) for B2C and recordings. Legitimate interest (Art. 6(1)(f) GDPR) is possible for B2B prospecting subject to a Legitimate Interest Assessment. Call recording usually requires explicit consent of both parties. ### Are data transferred to the United States? Yes by default. Salesloft hosts data on AWS in the United States. An EU residency option is available for enterprise tiers. SCCs and a Transfer Impact Assessment are required for US transfers. ### Do I need a DPIA? Recommended in most B2B contexts and required for large scale outreach, automated lead scoring, or call recording. The DPIA must cover Art. 14 obligations, retention, third party transfers, and rights to object. ### How do I implement Salesloft compliantly? Activate EU residency where possible, sign the Salesloft DPA and SCCs, document the lawful basis country by country, send Art. 14 notices, allow one click unsubscribe, configure call recording with explicit consent, run a DPIA, and update the privacy notice. ### What are the alternatives to Salesloft? Alternatives include Outreach, Apollo.io, Reply.io, Mixmax, Lemlist (France), La Growth Machine (France), Woodpecker (Poland). EU based vendors simplify the transfer analysis. ### How do I update my privacy policy and notice? Add Salesloft as a processor, list the data categories, mention the US transfer or EU residency, the retention period, the legal basis (consent or legitimate interest), the right to object and the unsubscribe channel. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Quicksprout](https://www.flowconsent.com/en/services/marketing/quicksprout) [Quicksprout is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Quicksprout supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Quicksprout enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/marketing/quicksprout) [Analytics](https://www.flowconsent.com/en/services/marketing/quicksprout) · ### [Poster](https://www.flowconsent.com/en/services/marketing/poster) [Poster is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Poster supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Poster ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/poster) [Preferences](https://www.flowconsent.com/en/services/marketing/poster) · ### [Trustify](https://www.flowconsent.com/en/services/marketing/trustify) [Trustify is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Trustify supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Trustify ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/trustify) [Preferences](https://www.flowconsent.com/en/services/marketing/trustify) · ### [Alpha Review](https://www.flowconsent.com/en/services/marketing/alpha-review) [Alpha Review is a customer review and reputation management platform that helps businesses collect, manage, and showcase authentic customer feedback. It automates review request workflows, aggregates ratings from multiple sources, and displays social proof. Alpha Review supports rich snippet integration for enhanced search engine visibility, helping build trust, improve local SEO, and increase conversion rates through verified customer testimonials.](https://www.flowconsent.com/en/services/marketing/alpha-review) [Preferences](https://www.flowconsent.com/en/services/marketing/alpha-review) · ### [Clutch](https://www.flowconsent.com/en/services/marketing/clutch) [Clutch is a customer review and reputation management platform that helps businesses collect, manage, and showcase authentic customer feedback. It automates review request workflows, aggregates ratings from multiple sources, and displays social proof. Clutch supports rich snippet integration for enhanced search engine visibility, helping build trust, improve local SEO, and increase conversion rates through verified customer testimonials.](https://www.flowconsent.com/en/services/marketing/clutch) [Preferences](https://www.flowconsent.com/en/services/marketing/clutch) · ### [Maatoo](https://www.flowconsent.com/en/services/marketing/maatoo) [Maatoo is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Maatoo enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Maatoo empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/maatoo) [Marketing](https://www.flowconsent.com/en/services/marketing/maatoo) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)