Salesforce Koa is its first CRM reasoning model, built on NVIDIA Nemotron. What it changes for Agentforce model selection, per agent and per subagent.
Salesforce Built Its Own Model. The Real Story Is the Dropdown Next to It.
Koa landed at Dreamforce 2026 as Salesforce’s first CRM reasoning model, post-trained from NVIDIA Nemotron and run inside Salesforce’s own trust boundary. The change that hits your org first is quieter: which model powers which agent is now a design decision, down to the individual subagent.
Koa is Salesforce’s first CRM reasoning model, built with NVIDIA by post-training Nemotron 3 Super on a synthetic dataset drawn from 27 years of CRM deployments, with inference running inside Salesforce infrastructure. Customer pilots start in October and general availability is expected in winter 2026 for US regions. The work you can start today has nothing to do with waiting: your org already has a model selection in Setup, an override path per agent and per subagent in Agent Script, and a billing model where a model that makes fewer mistakes costs you less.
In This Article
Dreamforce week produced roughly ten thousand photos of the same keynote slide. Benioff and Jensen Huang on stage, the Koa announcement behind them, phones up across Moscone. Fair enough. Salesforce building its own reasoning model is a big deal.
Meanwhile, in your org, there is a screen almost nobody has opened. Setup, Quick Find, type “Audit, Analytics, and Monitoring,” then Einstein Audit, Analytics, and Monitoring Setup. Inside it sits a section called Select the Model for Agentforce. Whatever is selected there right now is reasoning over your accounts, your cases, and your opportunities, on every agent you have deployed.
Most teams have never changed it. For two years that was a reasonable position, because the choice was thin and the differences were marginal. That is no longer true. Gemini went generally available in the Agentforce Reasoning Engine at Dreamforce, Anthropic and NVIDIA models are live through Amazon Bedrock, OpenAI models on Bedrock were announced as coming, and Koa joins the list when pilots open in October.
Koa is the headline. Model selection is the homework. One of them you can act on this afternoon, and it is not the one on the slide.
How Agentforce Got Here
Autonomous agents arrive in the CRM. The model underneath is Salesforce’s business, not yours.
A wider skill library and stronger reasoning. Still a single managed mix under the hood.
Visibility and control for teams scaling agents past the pilot stage.
Agent Script gains model_config, so a single agent can run different models in different subagents.
AIforce, Gemini GA in the Reasoning Engine, Salesforce in Claude in beta, and Koa in pilot.
Read that timeline as a single trend and it is obvious where this went. Agentforce started as one model you could not see. It is now a menu you are expected to manage.
Salesforce and NVIDIA announced Koa on September 15. The build approach matters more than the branding: Salesforce took NVIDIA’s Nemotron 3 Super, an open model, and post-trained it on a proprietary synthetic dataset modeled on enterprise knowledge from close to three decades of CRM deployments. Not customer records. Synthetic data shaped by how businesses actually run their processes, workflows, and operational policies.
The benchmark claim is specific, which I appreciate. Salesforce ran a suite of real CRM tasks, things like updating an opportunity, routing a case, scheduling a follow-up, and reports that Koa matches or beats leading models on those actions with three times fewer errors. That is a narrow claim about a narrow job. It is also exactly the job your agents do all day.
Why Build Rather Than Rent
General models are tuned for conversation. CRM work is multi-step tool use: read the record, pick the action, write back, verify. Koa is post-trained for that loop.
Salesforce controls the weights and runs Koa on its own infrastructure, so no customer data crosses the trust boundary during inference. No customer data was used to train it.
Most agent failures are not bad prose. They are the wrong tool, called with the wrong input, at the wrong step. That is the failure class Koa targets.
The same NVIDIA work extends into Missionforce, bringing Nemotron-based models to government and regulated environments including private clouds and air-gapped networks.
Koa already powers an employee agent in Slack inside Salesforce, helping staff find information and finish everyday tasks before it reached any customer.
1-800Accountant, Baxter Credit Union, Engine, Formula 1, UChicago Medicine, and Xero are named in the launch, which is a broader spread of industries than most pilots get.
There is a strategic read here too. Salesforce picked an open-weight base specifically so it could own what happens after training. When the weights are yours, the deployment story, the residency story, and the regulated-industry story all become yours to control. Ask anyone who has tried to get a public sector security review past a third party inference endpoint how much that is worth.
Forget Koa for a minute. Open the Setup screen from section one and look at what is already selectable, because this is the surface you will be managing for the next several years.
| Option | What Runs | Notes | Status |
|---|---|---|---|
| Salesforce Default | Managed mix of trusted models | New Agentforce Builder agents use GPT-4.1; legacy Builder agents use GPT-4o | GA |
| AWS-Hosted | Claude Haiku 4.5 on Amazon Bedrock | Traffic stays in the Salesforce VPC over PrivateLink, TLS 1.2 minimum, nothing persisted at Bedrock | GA |
| Google Gemini | Gemini 3.5 Flash on Vertex AI | Supported for agents built in the new Agentforce Builder only | GA |
| Koa | Salesforce CRM reasoning model | Selectable in Agentforce when customer pilots open; US regions at GA | Pilot Oct ’26 |
| OpenAI on Bedrock | OpenAI models via Amazon Bedrock | Announced at Dreamforce as coming soon, no date published | Announced |
That Setup selection is org-wide. Every Agentforce agent you own inherits it. If that were the whole story, model choice would be a one-time debate in an architecture review and then nobody would think about it again.
It is not the whole story. Since the May 2026 release, Agent Script supports a model_config block that overrides the default for a specific agent or a specific subagent, and Agentforce Builder now exposes that as a Model Override picker so you are not hand-typing model API names into a script anymore.
The Precedence Stack
Applies to every agent and every subagent that does not override it. This is your floor, so choose it for the workload you have most of, not the workload you talk about most.
Set once on the agent and inherited by all of its subagents. Useful when one agent handles a materially harder class of work than the rest of your fleet.
The finest grain available. Salesforce’s own documented example runs Gemini 3.1 Pro for one reservation subagent while every other subagent in the same agent stays on Claude Haiku 4.5.
Some templates, including the Agentforce Service agent, use the Salesforce-owned EinsteinHyperClassifier for subagent classification. It is faster and more accurate at classification, and it cannot use before_reasoning, after_reasoning, or any tool except @utils.transition.
AGENT SCRIPT// Model API names come from the Model Override picker in Agentforce Builder. agent service_operations: model_config: model = "model://<agent_level_model_api_name>" subagent resolve_billing_dispute: // Harder reasoning, more tool hops, higher cost of a wrong write. model_config: model = "model://<stronger_model_api_name>" subagent check_order_status: // Inherits the agent-level model. One hop, low blast radius.
Google Gemini is supported for agents built in the new Agentforce Builder only. If you still have active agents from the legacy Builder, sort out that migration before you switch the org-level option. Salesforce also recommends retesting prompts, custom actions, and subagents after any model change, and updating custom actions to match the model you selected so behavior stays consistent end to end.
Here is the part that turns model selection from an engineering preference into a budget conversation.
Under Flex Credits, you buy credits at $500 per 100,000 and a standard Agentforce action consumes 20 of them, so roughly ten cents per action. A voice action runs 30 credits. An action is metered up to a token ceiling, and when a single action pushes past that ceiling it bills as more than one action. Published guidance puts the standard ceiling around 10,000 tokens, which sounds generous until you count system instructions, user input, prompt template text, retrieved grounding chunks, and the response, all in the same bucket.
Now think about what an error costs. The agent picks the wrong tool. That call is an action. It gets a result it cannot use, reasons again, and calls the right tool. Another action. If the first write went through before anyone noticed, you also get a correction action and an unhappy record owner. A model that errs three times less often produces shorter action chains. Shorter chains cost less and break less.
Those three numbers are illustrative, not a rate card. Your own action counts come out of the Digital Wallet and your usage reports, and you should pull them before you argue for anything. The pattern holds regardless of the exact figures: accuracy compounds downward through the bill, and it compounds hardest on the agents with the longest tool chains.
Flex Credits and the $2 per conversation model cannot run in the same org at the same time, so this is a contract-level decision rather than a configuration toggle. Conversation pricing caps the cost of a chatty interaction. Flex Credits reward short, accurate action chains. Which one flatters you depends entirely on how many actions your agents actually take, and the answer is usually in your usage data rather than in a spreadsheet estimate.
Model selection is a new discipline for most Salesforce teams, and there is no established practice to copy yet. Here is the approach I would run, structured around the three things you actually control.
None of this requires Koa. Run it now against the three options you already have, and when pilots open in October you will have a test harness ready instead of a hunch.
Koa is in pilot, not in your org, and a few things are still open. None of them are reasons to sit still. They are just the items that belong on your plan rather than in your assumptions.
- GA is expected in winter 2026 for US regions
- No dates published yet for other regions
- Multi-region orgs should plan a phased model strategy rather than a single global switch
- Do now: map which agents serve which regions, before you need the answer
- Salesforce stated no new Agentforce pricing at Dreamforce
- Your existing Flex Credits or conversation model still governs consumption
- Accuracy gains show up in action counts regardless of how the model is priced
- Do now: baseline your actions per conversation so you can prove the delta later
The router deserves a specific mention. If your agent uses EinsteinHyperClassifier for subagent classification, that piece stays on a Salesforce-owned model and comes with real constraints, no before_reasoning or after_reasoning hooks and only the @utils.transition tool. That is a deliberate trade for classification speed and accuracy. Know it is there so you are not debugging a routing behavior you assumed was coming from your chosen model.
Terms You Will Hear This Quarter
Salesforce’s first CRM reasoning model for Agentforce, post-trained from NVIDIA Nemotron 3 Super and run inside Salesforce infrastructure.
The Agent Script block that overrides the org-level model for a specific agent or subagent. Subagent settings beat agent settings.
A Salesforce-owned model used for subagent classification in the agent router, chosen for classification speed and accuracy.
The Agentforce component that plans and executes agent turns. It uses whichever model option your org or script has selected.
Consumption billing for Agentforce. Credits are purchased at $500 per 100,000, and a standard action consumes 20 of them.
The interface layer announced at Dreamforce 2026 that brings Salesforce data, workflows, and permissions into Claude, Slack, and other AI surfaces.
Before Pilots Open in October
For most of the last two years, the honest answer to “which model is Agentforce using?” was a shrug and a link to the docs. That era closed on September 15. Salesforce now ships a model trained on how CRM work behaves, alongside three others you can select per subagent, with a billing model that quietly rewards whichever one gets the tool call right the first time.
So the interesting question is not whether Koa beats Claude or Gemini on somebody’s benchmark. It is narrower and more useful than that. Which of your subagents is doing work hard enough to deserve a different model, and can you prove it with your own data before somebody asks?