SPF and your providers
SPF for Microsoft 365 and Salesforce
We have 3 records using both. Together they average 3.7 of your 10 DNS lookups — before anything else in the record.
What to do about it
Both providers publish their own includes, and both change them when their infrastructure changes — which is exactly why hand-flattening them goes stale. Pointing one include at us keeps your record at a fixed cost regardless of what either of them does next.
Check your own record
Averages are averages. Yours is what counts.
See also Microsoft 365 and Salesforce on their own.