Salesforce connects to Vanta through two separate native integrations, not one. For SOC 2 access reviews, Vanta reads Salesforce user profiles, roles, and active status, and can deactivate offboarded accounts on request (it will not deactivate whichever account authorized the connection, since that would break the link). That integration needs the "Approve Uninstalled Connected Apps" permission and takes under 5 minutes to set up. The Trust Center integration reads Salesforce contacts, accounts, and opportunities instead: it auto-approves gated document access for matching contacts, logs downloads back to Salesforce as activity, creates leads and tasks from that engagement, and ties opportunity data to Trust Center visits for revenue attribution. Connect whichever matches your goal. They use different Salesforce permission sets.