For a decade, "AI in the CRM" mostly meant chatbots that followed scripts and predictive scores that sat quietly on a record page. Agentforce is a different idea. Instead of scripting every turn of a conversation, you give an AI agent a job, the information it needs and a set of actions it is allowed to take, and it works out how to get the job done.
This guide explains what Agentforce is, how the pieces fit together, where it delivers value today, what it costs and how to launch a first agent without putting customers or data at risk. It is written for business and technology leaders who already use Salesforce and want a clear picture before they commit budget.
Agentforce is Salesforce’s platform for building, testing and running autonomous AI agents that operate inside the Salesforce ecosystem. Salesforce introduced it at Dreamforce in September 2024, and it has since become the centre of the company’s AI strategy.
An Agentforce agent can understand a request written in everyday language, look up the relevant records, decide which steps are needed and carry them out, for example checking an order, rebooking an appointment, updating a case or drafting a follow-up email. Crucially, it does this using the same data, permissions and automation your team already relies on in Salesforce.
Agents can face customers (on your website, in a mobile app or on messaging channels) or support employees (inside Salesforce, Slack or other tools). Salesforce also provides prebuilt agent templates, such as service and sales development agents, that you can adapt instead of starting from a blank page.
Every agent is built from a small number of components. Understanding them is the fastest way to understand what an agent can and cannot do.
A topic is a category of work the agent handles, such as "Order status", "Returns" or "Appointment changes". Each topic has a description that tells the agent when it applies, plus instructions written in plain language: what to ask for, what policies to follow and when to stop. Good topics are narrow and unambiguous. Vague topics are the most common cause of agents picking the wrong path.
Actions are the things an agent is allowed to do. They are built from tools Salesforce teams already know:
An agent cannot do anything that has not been exposed to it as an action. This is the single most important safety property of the platform, and it is why action design deserves most of your build effort.
The Atlas Reasoning Engine is the part that plans. It reads the user’s message and the conversation so far, chooses the matching topic, decides which actions to call and in what order, checks the results and either responds or asks a clarifying question. This loop is what separates an agent from a scripted bot.
Agents are only as useful as the information they can reach. Grounding can come from standard and custom Salesforce objects, your Salesforce data model, Knowledge articles and, for broader or unstructured data, Salesforce Data Cloud. Grounding lets the agent answer with your policies and your customer’s actual records instead of generic model knowledge.
Requests to the underlying large language models pass through the Einstein Trust Layer. It supports secure data retrieval that respects user permissions, masking of sensitive data before prompts leave Salesforce, toxicity detection, audit trails and zero data retention agreements with model providers. It reduces risk, but it does not replace good design. An agent with overly broad permissions is still a risk.
| Capability | Einstein Bots | Generic AI chatbot | Agentforce agent |
|---|---|---|---|
| How conversations are handled | Scripted dialogue trees | Free-form answers from a model | Goal-driven reasoning within defined topics |
| Access to CRM records | Yes, through designed steps | Usually none, or a custom integration | Yes, through permitted actions |
| Can take actions (update, book, refund) | Only scripted ones | Rarely, and risky without controls | Yes, limited to the actions you expose |
| Handles unexpected phrasing | Weak | Strong | Strong |
| Security and permissions | Salesforce permissions | Depends on the vendor | Salesforce permissions plus the Einstein Trust Layer |
| Effort to maintain | High as flows grow | Low to start, hard to govern | Moderate: topics, actions and tests |
The best early use cases share three traits: the request is frequent, the answer depends on data already in Salesforce, and a mistake is recoverable. Here are examples we see working well by team.
Most failed AI pilots fail on foundations, not on the AI. Before building an agent, check the following:
Pricing has changed several times, so treat any figure you read online as a starting point for a conversation rather than a quote. At launch in late 2024, Salesforce priced customer-facing agents per conversation. During 2025 it added a consumption model based on credits spent per action ("Flex Credits"), along with per-user options for employee-facing agents. Your total cost has three parts:
| Cost element | What drives it |
|---|---|
| Agentforce licences or consumption | Channel, number of conversations or actions, and whether agents serve customers or employees |
| Supporting Salesforce products | Service Cloud, Messaging, Data Cloud or Knowledge if not already licensed |
| Implementation | Number of topics, complexity of actions, integrations, data clean-up, testing and change management |
A focused pilot with a handful of topics and actions built on existing automation is a modest project. Costs rise with the number of external systems the agent must reach and the rigour of testing your industry requires. Our Salesforce implementation cost guide breaks down the implementation side in more detail.
Agentforce is a strong fit if you already run core customer processes in Salesforce, handle a meaningful volume of repetitive requests, and have reasonably clean data. It is a weaker fit if your key data lives outside Salesforce with no integration plan, or if your processes are still changing week to week. In that case, fix the foundations first; the agent will be better and cheaper to build afterwards.
If you are weighing Agentforce against a custom large language model application built outside Salesforce, our guide to RAG versus fine-tuning explains the alternative architecture, and our overview of generative AI use cases with real ROI will help you prioritise.
Groviya’s Salesforce team designs and delivers Agentforce pilots end to end: use-case selection, data and process readiness, action development in Flow and Apex, integration through MuleSoft or APIs, testing and post-launch optimisation. Explore our Salesforce implementation services or talk to an expert about a scoped pilot for your team.