Salesforce is interesting. On the one hand it's tempting to move all those spreadsheets of customer details into Salesforce, send all your email through Marketing Cloud and let Marketing Cloud manage opt-outs.
On the other that puts all of your personal data in one place where any salesman chasing a target can use it, even if your lawful basis for processing doesn't cover sales. Salesforce's permission model isn't usable enough to enforce the lawful basis rules and it's a right pain to do data minimisation.
So I'm curious what other people have done?
Biting the hand that feeds IT
