Skip to main content
GPTfy - Salesforce Native AI Platform
5.0The Agentforce alternative · No Data Cloud required

Enterprise AI, inside your Salesforce

GPTfy runs your own AI models on your Salesforce data. PII is masked before any model call, pricing is per user rather than per conversation, no Data Cloud is required, and most teams go live in 2 to 3 weeks.

Salesforce Security Reviewed. Live in 2 to 3 weeks.

Renewal risk

01 / 03
  • Security review has not been scheduled
  • Close date sits a quarter after the renewal date
  • Champion re-engaged after the masking spec was shared
Grounded in 14 activities on this OpportunityPII masked
Available on Salesforce AppExchangeListed on Microsoft AppSource5.0AppExchange4.5G2Salesforce Security Reviewed

Brands that trust our products

Brands that trust our products: PayPal, Coinbase, Resolution Life, Manulife, Education First, Mercedes-Benz, iRobot, ClearChoice, Legal & General, Stellantis, Grohe, Deloitte, Floor Decor, CloudKitchens, Jumeriah, SafeGuard Global, Saint Louis University, Schwarz, World Health Organization, Victorian Chamber of Commerce and Industry, PenFed Credit Union, Elpedison, Wolters Kluwer, Cultural Care Au Pair.

S&P Global is a GPTfy customer.

What actually leaves your org

Four layers sit between this record and the model.

  1. Field-value masking
  2. Regex patterns
  3. Blocklist keywords
  4. Custom Apex handlers

Four masking layers run before any model call. Field-value masking takes whole fields; regex patterns and blocklist keywords mask strings found inside long text; custom Apex handles what the first three do not. Together they cover 16 of the 18 HIPAA PHI identifiers. The deal value is not masked, so the model can still reason about the opportunity. Every run writes a Security Audit Record in your org.

A Salesforce prompt context assembled inside your org, passing through four masking layers. Field-value masking replaces the contact name, email and phone with the tokens CONTACT_1, EMAIL_1 and PHONE_1. Inside the opportunity note, a regex pattern masks the email address where it appears in free text and a blocklist keyword masks the account name Northlake Diagnostics. The opportunity amount of $2,450,000 is cleared by the custom Apex handler and crosses unchanged. Only the masked payload leaves the org, and the run writes a Security Audit Record.

What GPTfy is

GPTfy is a Salesforce-native AI platform that runs your choice of AI model, including OpenAI, Claude and Gemini, on your CRM data inside Salesforce. It applies four layers of masking, covering 16 of 18 HIPAA PHI identifiers, before the payload reaches the AI model your company already pays for. It requires no Data Cloud. Pricing is per user rather than per conversation.

FIG. 01

A voice note that files itself.

No call is recorded. The rep dictates a note.

A nineteen second dictated note, “Dana at Northlake. Renewal timing and security review. Pull it into Q3”, filed by GPTfy as Salesforce Task 00TDn00000K4bV7, subject Renewal timing and security review, associated to Contact Dana Whitfield (003Dn00000y5d6I) and to Opportunity Northlake Renewal FY27 (006Dn00000H6R1p). The Task was created at 07:41 as the rep who spoke, and no field was typed.

“Dana at Northlake. Renewal timing and security review. Pull it into Q3.”

Dictated · 00:19

Task · 00TDn00000K4bV7

Renewal timing and security review

ContactDana Whitfield003Dn00000y5d6I
OpportunityNorthlake Renewal FY27006Dn00000H6R1p

Filed 07:41 · as the rep who spoke · no fields typed

The audio lands as a file in your org. You choose the object.

A rep speaks for about twenty seconds and GPTfy writes a Salesforce Task associated to the right Contact and the right Opportunity. No call is recorded. The rep dictates their own note, so what gets filed is their judgement of what mattered rather than a transcript of a meeting.

Where the audio sits
As a Salesforce file on the record, inside your own org. Your retention and deletion rules govern it, because it is an ordinary file in your storage.
Who touches it
Speech to text is an outbound call through a Named Credential you create in your org, to the endpoint you name. GPTfy keeps no copy of the audio or the text, and holds no data centre of its own.
What it writes to
Task by default, on the standard WhoId and WhatId lookups. Event or a custom object you already use are both configurable, so a recap object you built yourself is a valid target.
Whose permissions
It runs as the person who pressed the button. Sharing rules, field level security, validation rules and record types all still apply, and can still reject the write.
The rest of the Task
Type Call. Status Completed. ActivityDate 2026-09-08. OwnerId Marcus Feld, Enterprise AE. It lands on the Contact and the Opportunity timelines.
Why two Opportunities did not confuse it
Two were open on Northlake Diagnostics. The note names the renewal, so the Task associated to Northlake Renewal FY27 and not to the other one.
Notice
Whether a dictated note needs notice where you operate is your counsel’s determination, not ours.

FIG. 03Asked in Teams, answered from Salesforce

Every answer shows the records it used.

Ask in Microsoft Teams or Copilot. GPTfy answers from your Salesforce data and writes the follow-up back to the record, so nobody has to open Salesforce. Install it from Microsoft AppSource

Asked in Microsoft Teams

“What is blocking the Northlake renewal?”

Priya Raman, RevOpsSalesforce user 005Dn0000038xQa

The answer

  • Security review is not scheduled. No review activity on the Opportunity.
  • Close date is one quarter past the renewal date.
  • No activity logged since 21 Aug.

Assembled from · 3 records and 14 activities

  • 006Dn00000H6R1pOpportunity · Northlake FY27
  • 001Dn00000QwB4mAccount · Northlake Diagnostics
  • 003Dn00000y5d6IContact · Dana Whitfield

Created in Salesforce · Task 00TDn00000P3kVr

Schedule Northlake security review

Type
Call
WhatId
006Dn00000H6R1p Northlake FY27
ActivityDate
12 Sep 2026
OwnerId
005Dn0000038xQa Priya Raman

Security Audit record ccai__AI_Response__c a0BDn00000Wq8Lt

FIG. 02Before you book anything

How it runs in your org.

The facts your security team will ask for, answered before the call.

Three rows are still open

We answer them in writing before your security review rather than guess at them here. Read the S.P.E.C. security spec

What installs

Distribution
Managed package, installed by your admin
Namespace prefix
ccai
Salesforce Security Review
Passed
Marketplaces
Salesforce AppExchange and Microsoft AppSource
Data platform required
None. No Data Cloud.
Permission sets installed
Five: GPTfy Admin, User, Portal User, Reporting User, Voice User
Pre-built prompts
100+, editable by your admin
Typical time to live
2 to 3 weeks
Pricing
Per user, per month, fixed by seat

How it runs

Masking layers
Four, covering 16 of 18 HIPAA PHI identifiers
Model connection
Salesforce Named Credentials, to your own AI contract
Where the response lands
Back inside your org, against the record it ran on
Security Audit Record
One per run, stored as a Salesforce record
Audit retention
Configurable. Records auto-delete on your schedule.
Compliance posture
HIPAA, GDPR and FINRA ready
Execution context, FLS and sharing
TBC
Behaviour on an unmapped field
TBC
Sub-processors
TBC

Installed in your org · namespace prefix ccai · five GPTfy permission sets, assigned by your admin

FIG. 04Proposed, then written

Nothing is written until a person confirms it.

GPTfy proposes the change as a diff against the live record, and shows what it was unsure about rather than guessing.

A proposed change to the Salesforce Opportunity Northlake Renewal FY27, record 006Dn00000H6R1p. Stage would move from Negotiation to Contracting and the close date from 2027-01-31 to 2026-10-31. Two Contacts match the name in the note, so GPTfy proposes Dana Whitfield, the operations lead, and shows the other Contact it matched rather than guessing. Nothing has been written and no record in the org has changed.
Proposed changeNot yet written

Move this to contracting and pull the close date in.

Target · Opportunity 006Dn00000H6R1p

Stage
Negotiation changes to Contracting
Close Date
2027-01-31 changes to 2026-10-31
Primary Contact
Two Contacts match this name.
  • Dana Whitfield003Dn00000y5d6IProposed
  • Daniel Whitfield003Dn00000y5d7BAlso matched

The note names the operations lead.

Last Modified By
unchanged

No record changed · no audit record · nothing written

Human confirmation
The Salesforce Opportunity Northlake Renewal FY27, record 006Dn00000H6R1p, after confirmation. Stage is Contracting, the close date is 2026-10-31, the primary Contact is Dana Whitfield, record 003Dn00000y5d6I, chosen from two matching Contacts, and Last Modified By is Marcus Hale, the person who confirmed the change, at 11:31 on 2026-09-12. The run wrote Security Audit Record a0XDn00000K4mR2, which is retained in your org.
Written2026-09-12 11:31

Northlake Renewal FY27

Opportunity · 006Dn00000H6R1p

Stage
Contracting
Close Date
2026-10-31
Primary Contact
Dana Whitfield003Dn00000y5d6I · Director of Operationschosen from 2 matching Contacts
Last Modified By
Marcus HaleSecurity Audit Record a0XDn00000K4mR2, retained in your org

LastModifiedBy Marcus Hale · 2026-09-12 11:31 · confirmed before write

Without queueing a request

The report nobody had to build

Ask GPTfy a question in plain English and it returns the matching Salesforce records, so a report you would have queued with an admin takes one sentence. Admins build and adjust prompts themselves, without a developer.

Asked

Which renewals over half a million are still open this quarter?

Specimen query result
AccountStageAmountClose
Northlake DiagnosticsContracting$2,450,00031 Oct
Fairhaven HealthNegotiation$1,180,00014 Nov
Portway IndustrialProposal$860,00002 Dec
Kestrel MutualNegotiation$740,00019 Dec

Example result

Beyond the CRM

Data that never lived in Salesforce

GPTfy reads Snowflake data through the Salesforce Lightning OData connector, and its MCP server lets approved assistants read live Salesforce data. Each connection is listed with its direction, because read and write are not the same promise.

Systems GPTfy reaches, each labelled with whether it is read only or read and writeSnowflakevia Lightning ODataREADERP and warehousesexisting connectionsREADClaude, ChatGPT, MCPGPTfy MCP serverREADTeams and Copilotvia Microsoft AppSourceREAD AND WRITEGPTfy,INSIDEYourSalesforceorgone managedpackage

Left on the listing, not written by us

What Salesforce people say

GPTfy is rated 5.0 on the Salesforce AppExchange and 4.5 on G2. These are reviews left by named Salesforce practitioners on the public listing.

“Loved the easy and click/no-code way to configure GPT LLMs on any Salesforce object and go-live in days.”

Gurditt GargChief Salesforce Evangelist, Motorola
“It enables Salesforce professionals like me to leverage the AI of my choice (BYOM) in a declarative manner.”
Sury RamamurthyTechnical Architect, Innolake Corporation
“Saw this App and was impressed. Saved our team over 15 hours per rep monthly with streamlined workflows.”
Amar RawalBusiness Analyst, Origin
“Setup took under ten minutes with a clean interface and excellent pre-configured prompts.”
Salman KhanRelease Manager, IBM
“Completely changed how I work in Salesforce with intuitive, powerful AI built directly inside the CRM.”
Shantanu EaliyaSalesforce Developer, TCS
“Easy to use, does exactly what it promises, and lets you create and deploy prompts in minutes.”
Shailesh VarshneyDeveloper, Capgemini Australia

The whole thing, unedited

Watch it work

The full walkthrough, running inside a real Salesforce org. Nothing here is a mockup, and nothing is sped up.

Prefer to skip to the part that matters to you? The library has 76 recordings, indexed by use case.

Browse the demo library

Watch the full demo

10-second form · instant access

Before you ask

Common questions

The questions a Salesforce architect asks on the first call. If yours is not here, the security page carries the full data path spec.

Read the security overview

No. GPTfy is a managed package installed from the Salesforce AppExchange. It runs on the CRM data already in your org and requires no Data Cloud and no separate data platform.

Next step

See it on your own org

A demo runs on your data, with your masking rules, inside a real Salesforce org. No slides.

The S.P.E.C. security spec is ungated and covers the masking layers and the endpoints. Take it to your security team before you book anything.

  • 5.0 on AppExchange
  • 4.5 on G2
  • Salesforce Security Reviewed
  • No Data Cloud required