Odaseva for PIPL

Odaseva ensures Enterprises meet every mandate everywhere.
Pixelated world map showing global privacy regulation locations

California Privacy Rights Act (CPRA)

Learn More

General Data Protection Regulation (GDPR)

Learn More

Personal Information Protection Law (PIPL)

Learn More

Australia Privacy Act

Learn More
The Personal Information Protection Law (PIPL) applies to any organization or individual that processes the personal information of people living in mainland China, regardless of where that organization is physically located.

As the only Salesforce data security and management vendor available in China, Odaseva helps global enterprises run their local operations smoothly, ensuring their Salesforce on Alibaba Cloud (SFoA) data stays localized, protected, minimized, and available.

How Odaseva helps

Data Residency

“Critical information infrastructure operators and personal information processors whose processing of personal information reaches the number prescribed by the State cyberspace administration shall store the personal information collected and generated within the territory of the People’s Republic of China within the territory of China.”
PIPL, Article 40

Keep your Chinese PII in China

Stored locally, the Odaseva platform allows global organizations to meet strict PIPL data residency requirements, no matter their Salesforce architecture. For companies seeking market insights from their China operations, Odaseva automatically blocks cross-border transfers of sensitive PII, while still giving global teams compliant, anonymized access to the data they need for business intelligence.

Data Availability

"The personal information protection assessment report and processing record shall be kept for at least three years."
PIPL, Article 56

Ensure Audit-Readiness

Odaseva provides the necessary immutable architecture for long-term PIPL compliance. By leveraging secure storage on Alibaba Cloud with Odaseva Backup & Restore and Data Archiving solutions, we enable enterprises to securely keep their processing records and activities logs for the retention period needed, ensuring they remain available and audit-ready for regulatory review at any time.

Data Protection

“Personal information processors shall be responsible for their processing of personal information and take necessary measures to ensure the security of the personal information they process.”
PIPL, Article 9

Safeguard Critical Data

Odaseva helps personal information processors prove and meet PIPL compliance with enterprise-grade Backup & Restore to safeguard critical data Odaseva, the only Salesforce Backup & Restore solution available in China, and Zero Trust Connect to deliver end-to-end encryption for data leaving your Chinese Salesforce Org, ensuring protection throughout its entire lifecycle.

Data Minimization

“The retention period of personal information shall be the minimum period necessary for achieving the purpose of processing, except for where the retention period of personal information is otherwise provided for in laws and administrative regulations.
PIPL, Article 19

Eliminate Compliance Risk

Odaseva enables global enterprises operating in China to minimize their data by making them use retention policies, and pseudo-anonymization/anonymization techniques. By providing automated retention policies and advanced anonymization tools at scale, we ensure individual PII is permanently removed or scrambled once the mandatory necessary period ends.

Odaseva Certifications and Compliance

68%

of security leaders say compliance is more difficult amid evolving regulations.
Salesforce, State of IT, 4th edition: security

~$7.8 M

For grave violations, fines imposed on companies can reach as high as RMB 50 million (~$7.8 million) or 5% of the previous year's annual revenue.