Salesforce ComplianceSalesforce / Trust
Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

HIPAA

The HIPAA Privacy Rule provides federal protections for personal health information held by covered entities and gives patients an array of rights with respect to that information. Customers who want to build healthcare applications on Salesforce that comply with US HIPAA can contact your account representative regarding a Business Associate Addendum (BAA).


For the current BAA Restrictions and HIPAA Covered Services refer to https://www.salesforce.com/company/legal/business-associate-addendum-restrictions

Applicable documents by service

Name
[Whitepaper] Tableau Cloud and the HIPAA Security Rule
Updated On
2022-12-02
Infrastructure
AWS
Services
Tableau Tableau
Name
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud
Updated On
2019-11-01
Infrastructure
First party, AWS, Hyperforce
Services
B2B Commerce B2B Commerce
B2C Commerce / Commerce Cloud B2C Commerce / Commerce Cloud
Data Cloud Data Cloud
Heroku Heroku
Marketing Cloud Marketing Cloud
MuleSoft MuleSoft
Salesforce Government Cloud Plus Salesforce Government Cloud Plus
Salesforce Services and Additional Services Salesforce Services and Additional Services
Vlocity Vlocity
Name
[Video] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud
Updated On
2019-01-16
Infrastructure
First party, AWS, Hyperforce
Services
B2B Commerce B2B Commerce
B2C Commerce / Commerce Cloud B2C Commerce / Commerce Cloud
Data Cloud Data Cloud
Heroku Heroku
Marketing Cloud Marketing Cloud
MuleSoft MuleSoft
Salesforce Government Cloud Plus Salesforce Government Cloud Plus
Salesforce Services and Additional Services Salesforce Services and Additional Services
Vlocity Vlocity