Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Documents

NameUpdated OnInfrastructureCategory
SOC 2 Report - Zoomin 2025-03-26 AWS SOC 2
Salesforce Vulnerability Management Program Overview 2025-03-25 First party, AWS, Hyperforce FAQ's and White Papers
PCI ASV Network Scan - Hyperforce APAC (South East 2) Sydney, Australia 2025-03-24 Hyperforce PCI DSS
Salesforce Ransomware Mitigation Summary 2025-03-24 First party, AWS, Hyperforce FAQ's and White Papers
SOC 2 Report - Einstein Platform and Agentforce on Hyperforce 2025-03-21 Hyperforce SOC 2
SOC 3 Report - Einstein Platform and Agentforce on Hyperforce 2025-03-21 Hyperforce SOC 3
Vuln/Pen Report Summary - B2B, D2C, SOM, GenAI and Einstein for Commerce 2025-03-18 First party, Hyperforce External Security Assessments
Vulnerability/Penetration Report Summary - OwnCompany Inc. 2025-03-16 AWS External Security Assessments
DR Summary and Testing - Heroku 2025-03-14 AWS Resilience, BCP & DR
Vulnerability/Penetration Report Summary - Field Service Lightning (Andr./iOS) 2025-03-14 First party External Security Assessments
C5 (ISAE 3000) Report - Slack 2025-03-13 AWS C5 (ISAE 3000)
Tableau Cloud on Hyperforce Security White Paper (EN) 2025-03-12 Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - B2B Commerce (CloudCraze) 2025-03-12 First party External Security Assessments
Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview 2025-03-11 First party, AWS FAQ's and White Papers
Vulnerability/Penetration Report Summary - Mobile Publisher (Andr./iOS) 2025-03-11 First party External Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Mobile (Andr./iOS) 2025-03-11 First party External Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Services 2025-03-11 First party, AWS, Hyperforce External Security Assessments
FedRAMP - OwnCompany Inc. 2025-03-10 AWS FedRAMP Moderate
HDS Certificate - OwnCompany Inc. (EN) 2025-03-10 AWS Other Reports and Certificates
HDS Certificate - OwnCompany Inc. (FR) 2025-03-10 AWS Other Reports and Certificates
Information Security Guidelines for CSP - Hyperforce (JP) 2025-03-10 Hyperforce FAQ's and White Papers
ISO 27001 Certificate - OwnCompany Inc. 2025-03-10 AWS ISO 27001
ISO 27701 Certificate - OwnCompany Inc. 2025-03-10 AWS ISO 27001
Non-functional requirement grades by IPA - Hyperforce (JP) 2025-03-10 Hyperforce FAQ's and White Papers
Salesforce Services First Party Storage Encryption Summary 2025-03-10 First party FAQ's and White Papers
SOC 1 Report - OwnCompany Inc. (Recover, Archive, Accelerate and Secure) 2025-03-10 AWS SOC 1
SOC 2 Report - OwnCompany Inc. (Recover, Archive, Accelerate and Secure) 2025-03-10 AWS SOC 2
SOC 3 Report - OwnCompany Inc. (Recover, Archive, Accelerate and Secure) 2025-03-10 AWS SOC 3
PCI ASV Network Scan - Hyperforce AMER (US East 1) N.Virginia 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce AMER (US East 2) Ohio 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce AMER (US West 2) N.California 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (North East 1) Tokyo, Japan 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (North East 2) Seoul, South Korea 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (South East 3) Indonesia 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce Canada (CA Central 1) Canada 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU Central 1) Germany 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU Central 2, Zurich, Switzerland 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU North 1) Sweden 2025-03-04 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU West 2) UK 2025-03-04 Hyperforce PCI DSS
SOC 2 Report - Own from Salesforce 2025-03-04 AWS, Azure SOC 2
Salesforce Marketing Cloud Engagement Security White Paper (JP) 2025-02-27 First party FAQ's and White Papers
Vulnerability/Penetration Report Summary - Slack 2025-02-27 AWS External Security Assessments
Salesforce Marketing Cloud Engagement Security White Paper (EN) 2025-02-25 First party FAQ's and White Papers
DR Summary and Testing - Salesforce Services on Hyperforce 2025-02-24 Hyperforce Resilience, BCP & DR
Vulnerability/Penetration Report Summary - Tableau Cloud 2025-02-24 AWS External Security Assessments
CMMI Level 3 Appraisal Report 2025-02-21 First party, Hyperforce Other Reports and Certificates
SOC 1 Report - Spiff 2025-02-19 GCP SOC 1
SOC2 HITRUST Report - Slack 2025-02-19 AWS SOC 2
SOC 2 Report - Spiff 2025-02-19 GCP SOC 2
Salesforce Agentforce & Einstein Generative AI Security White Paper (JP) 2025-02-17 Hyperforce FAQ's and White Papers
DR Summary and Testing - Salesforce Services on First Party 2025-02-12 First party, AWS Resilience, BCP & DR
SOC 1 Bridge (Gap) Letter - Spiff 2025-02-12 GCP SOC 1
Vulnerability/Penetration Report Summary - Engagement Web APIs (fka ExactTarget) 2025-02-10 First party External Security Assessments
Salesforce Hyperforce Infrastructure - DR Summary 2025-02-07 Hyperforce Resilience, BCP & DR
Vulnerability/Penetration Report Summary - Quip 2025-02-06 AWS External Security Assessments
Vulnerability/Penetration Report Summary - B2C Mobify 2025-02-05 AWS External Security Assessments
SOC 1 Bridge (Gap) Letter - Salesforce Services & Corporate Services 2025-02-04 First party, AWS SOC 1
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
Salesforce Data Cloud Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
APEC Controller Certification - Slack 2025-01-30 AWS APEC Certification for Processors and Controllers
APEC Processors Certification - Slack 2025-01-30 AWS APEC Certification for Processors and Controllers
ISO/IEC 27001:2022 Certificate - Slack 2025-01-30 AWS ISO 27001
ISO Statement of Applicability - Slack 2025-01-30 AWS ISO 27001
PCI Attestation of Compliance (AoC) Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
PCI Responsibility Matrix -Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
SOC 3 Report - Slack 2025-01-30 AWS SOC 3
PCI Attestation of Compliance (AoC) - PredictSpring 2025-01-29 First party, AWS PCI DSS
Salesforce Enterprise Resilience/BCP Summary 2025-01-29 First party, AWS, Hyperforce Resilience, BCP & DR
SOC 2 Report - PredictSpring 2025-01-29 AWS SOC 2
Digital Operational Resilience Act (DORA) Frequently Asked Questions 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
Digital Operational Resilience Act (‘DORA’) Mapping 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
ISO Statement of Applicability (English) 2025-01-28 First party, AWS, Hyperforce ISO 27001
ISO Statement of Applicability (French) 2025-01-28 First party, AWS, Hyperforce ISO 27001
Salesforce Agentforce & Einstein Generative AI Security White Paper (EN) 2025-01-26 Hyperforce FAQ's and White Papers
Tableau Cloud - Accessing Your Private Network Data with Data Connect 2025-01-22 Hyperforce FAQ's and White Papers
Spain ENS High - Corporate Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Marketing Cloud Advertising on Hyperforce 2025-01-21 Hyperforce Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Marketing Cloud Engagement 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Mulesoft 2025-01-21 AWS Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Salesforce Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Salesforce Services on Hyperforce 2025-01-21 Hyperforce Spain Esquema Nacional de Seguridad (ENS)
Vulnerability/Penetration Report Summary - Heroku 2025-01-21 AWS External Security Assessments
UK’s NCSC 14 Security Cloud Principles 2025-01-20 First party, AWS, Hyperforce FAQ's and White Papers
DR Summary - Tableau Cloud on Hyperforce 2025-01-17 Hyperforce Resilience, BCP & DR
[Whitepaper] Tableau Pulse Security Overview 2025-01-16 AWS FAQ's and White Papers
MC Personalization Security Defense in Depth Whitepaper 2025-01-15 AWS FAQ's and White Papers
CJIS - MuleSoft Government Cloud 2025-01-14 AWS CJIS
SOC 2 Report - Amazon Web Services (AWS) 2025-01-10 AWS, Hyperforce SOC 2
DR Commitment - Slack 2025-01-09 AWS Resilience, BCP & DR
SOC 2 Report - Slack 2025-01-09 AWS SOC 2
C5 (ISAE 3000) Report - Salesforce Services 2025-01-07 First party, AWS C5 (ISAE 3000)
SOC 1 Bridge (Gap) Letter - Commerce Cloud 2025-01-06 First party SOC 1
SOC 1 Bridge (Gap) Letter - Heroku 2025-01-06 AWS SOC 1
SOC 1 Bridge (Gap) Letter - MuleSoft 2025-01-06 AWS SOC 1
SOC 1 Bridge (Gap) Letter - MuleSoft on Hyperforce 2025-01-06 Hyperforce SOC 1
SOC 1 Bridge (Gap) Letter - Salesforce Data Cloud 2025-01-06 Hyperforce SOC 1
SOC 1 Bridge (Gap) Letter - Salesforce Services on Hyperforce 2025-01-06 Hyperforce SOC 1
SOC 1 Bridge (Gap) Letter - Spiff on Hyperforce 2025-01-06 Hyperforce SOC 1
Salesforce Third Party Risk Management Overview 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
C5 (ISAE 3000) Report - Data Cloud 2024-12-20 Hyperforce C5 (ISAE 3000)
C5 (ISAE 3000) Report - Salesforce Services on Hyperforce 2024-12-20 Hyperforce C5 (ISAE 3000)
HDS Certificate 2024-12-20 First party, AWS, Hyperforce Other Reports and Certificates
ISO/IEC 27001:2022 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27001
ISO/IEC 27017:2015 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27017
ISO/IEC 27018:2019 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27018
NEN 7510-1:2017 Certificate 2024-12-20 First party, AWS, Hyperforce NEN 7510
SOC 1 Report - Heroku 2024-12-19 AWS SOC 1
SOC 1 Report - MuleSoft 2024-12-19 AWS SOC 1
SOC 2 Report - Activity Platform on Hyperforce 2024-12-19 Hyperforce SOC 2
SOC 2 Report - Advertising Studio on Hyperforce 2024-12-19 Hyperforce SOC 2
SOC 2 Report - Heroku 2024-12-19 AWS SOC 2
SOC 2 Report - MuleSoft 2024-12-19 AWS SOC 2
SOC 2 Report - Salesforce Vlocity Services 2024-12-19 First party, AWS, Hyperforce SOC 2
SOC 3 Report - Activity Platform on Hyperforce 2024-12-19 Hyperforce SOC 3
SOC 3 Report - Advertising Studio on Hyperforce 2024-12-19 Hyperforce SOC 3
SOC 3 Report - Heroku 2024-12-19 AWS SOC 3
SOC 3 Report - MuleSoft 2024-12-19 AWS SOC 3
SOC 3 Report - Salesforce Vlocity Services 2024-12-19 First party, AWS, Hyperforce SOC 3
PCI Attestation of Compliance (AoC) - Salesforce Services on Hyperforce 2024-12-18 Hyperforce PCI DSS
PCI Responsibility Matrix - Salesforce Services on Hyperforce 2024-12-18 Hyperforce PCI DSS
PCI Attestation of Compliance (AoC) - MuleSoft 2024-12-17 AWS PCI DSS
PCI Responsibility Matrix - MuleSoft 2024-12-17 AWS PCI DSS
Professional Services Infrastructure and Sub-processors 2024-12-17 First party, AWS, Hyperforce GDPR
Professional Services Security Privacy and Architecture 2024-12-17 First party, AWS, Hyperforce GDPR
SOC 1 Report - Salesforce Services 2024-12-17 First party, AWS SOC 1
SOC 1 Report - Salesforce Services on Hyperforce 2024-12-17 Hyperforce SOC 1
SOC 2 Report - Salesforce Services 2024-12-17 First party, AWS SOC 2
SOC 2 Report - Salesforce Services on Hyperforce 2024-12-17 Hyperforce SOC 2
SOC 3 Report - Salesforce Services 2024-12-17 First party, AWS SOC 3
SOC 3 Report - Salesforce Services on Hyperforce 2024-12-17 Hyperforce SOC 3
[Whitepaper] Slack and the HIPAA Security Rule 2024-12-16 AWS HIPAA
SOC 1 Report - Amazon Web Services (AWS) 2024-12-13 AWS, Hyperforce SOC 1
SOC 1 Report - Commerce Cloud 2024-12-13 First party SOC 1
SOC 1 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce SOC 1
SOC 2 Report - Commerce Cloud 2024-12-13 First party SOC 2
SOC 2 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce SOC 2
SOC 3 Report - Commerce Cloud 2024-12-13 First party SOC 3
SOC 3 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce SOC 3
Customer Guide for Incident Notification 2024-12-12 First party, AWS, Hyperforce FAQ's and White Papers
EU Cloud Code of Conduct (Salesforce Services) 2024-12-11 First party EU Cloud Code of Conduct
EU Cloud Code of Conduct (Salesforce Services on Hyperforce) 2024-12-11 Hyperforce EU Cloud Code of Conduct
Hyperforce External IPs 2024-12-11 Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - Tableau Mobile (iOS/Android/Intune) 2024-12-10 AWS External Security Assessments
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 1
SOC 2 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 2
SOC 2 Report - Marketing Cloud Account Engagement (fka Pardot) 2024-12-09 AWS SOC 2
SOC 3 Report - Marketing Cloud Account Engagement (fka Pardot) 2024-12-09 AWS SOC 3
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - MuleSoft 2024-12-05 AWS External Security Assessments
Professional Services Data Processing Addendum 2024-12-01 First party, AWS, Hyperforce GDPR
Salesforce Data Cloud Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
Vulnerability/Penetration Report Summary - OpenAI 2024-11-25 AWS External Security Assessments
PCI ASV Network Scan - Core 2024-11-21 First party, AWS PCI DSS
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud 2024-11-19 First party, AWS, Hyperforce HIPAA
SOC 1 Report - MuleSoft on Hyperforce 2024-11-18 Hyperforce SOC 1
SOC 2 Report - MuleSoft on Hyperforce 2024-11-18 Hyperforce SOC 2
SOC 3 Report - Mulesoft on Hyperforce 2024-11-18 Hyperforce SOC 3
HECVAT - Marketing Cloud Engagement 2024-11-14 First party FAQ's and White Papers
HECVAT - Salesforce Services 2024-11-14 First party FAQ's and White Papers
Vulnerability/Penetration Report Summary - Agentforce 2024-11-13 Hyperforce External Security Assessments
SOC 1 Report - Salesforce Spiff on Hyperforce 2024-11-11 Hyperforce SOC 1
ISMAP Cloud Service List - Salesforce Services 2024-11-06 First party ISMAP
ISMAP Cloud Service List - Salesforce Services on Hyperforce 2024-11-06 Hyperforce ISMAP
ISMAP Cloud Service List - Slack 2024-11-06 AWS ISMAP
SOC 2 Report - Salesforce Spiff on Hyperforce 2024-11-06 Hyperforce SOC 2
[Whitepaper] Security at Slack 2024-11-01 AWS FAQ's and White Papers
PCI Attestation of Compliance (AoC) - MuleSoft on Hyperforce 2024-10-31 Hyperforce PCI DSS
PCI Responsibility Matrix - MuleSoft on Hyperforce 2024-10-31 Hyperforce PCI DSS
Non-functional requirement grades by IPA - First Party (JP) 2024-10-30 First party FAQ's and White Papers
ACSC Essential 8 report for Salesforce Services and Data Cloud on Hyperforce AU 2024-10-29 Hyperforce IRAP
IRAP Assessment Report - Slack 2024-10-09 AWS IRAP
IRAP Engagement letter - Slack 2024-10-09 AWS IRAP
Information Security Guidelines for CSP - First Party (Japan) 2024-10-03 First party FAQ's and White Papers
MuleSoft BCP Summary 2024 2024-10-02 AWS Resilience, BCP & DR
DR Test Summary 2024 - MuleSoft 2024-09-27 AWS Resilience, BCP & DR
Vulnerability/Penetration Report Summary - RCG Industries 2024-09-24 First party, Hyperforce External Security Assessments
PCI Attestation of Compliance (AoC) - Commerce Cloud on Hyperforce 2024-09-09 Hyperforce PCI DSS
PCI Responsibility Matrix - Commerce Cloud on Hyperforce 2024-09-09 Hyperforce PCI DSS
Vulnerability/Penetration Report Summary - Tableau Pulse 2024-09-09 AWS External Security Assessments
Cloud Service Provider (CSP) Security Standard 2024-09-06 Hyperforce Other Reports and Certificates
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - Spiff 2024-08-30 GCP External Security Assessments
Vulnerability/Penetration Report Summary - MC Intelligence (fka Datorama) 2024-08-27 AWS External Security Assessments
Salesforce Services Hyperforce Storage Encryption Summary 2024-08-23 AWS, Hyperforce FAQ's and White Papers
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
PCI ASV Network Scan - MuleSoft 2024-08-14 AWS PCI DSS
PCI ASV Network Scan - Salesforce.org Payment Services 2024-08-14 AWS PCI DSS
Indonesia Financial Services user guideline for Salesforce Services 2024-08-11 Hyperforce FAQ's and White Papers
DoD IL4 - Salesforce Government Cloud Plus (Hyperforce) 2024-08-08 Hyperforce DoD IL4
HITRUST Certificate - Customer Data Cloud 2024-08-07 AWS HITRUST
HITRUST Certificate - Salesforce Services on Hyperforce 2024-08-07 Hyperforce HITRUST
IRAP Assessment Report - Salesforce Services on Hyperforce AU [PROTECTED] 2024-08-05 Hyperforce IRAP
Vulnerability/Penetration Report Summary - B2C Business Manager + OCAPI + SFRA 2024-08-01 First party, AWS External Security Assessments
DR/BCP Summary - Heroku Services 2024-07-31 AWS Resilience, BCP & DR
DR Summary - Tableau 2024-07-31 AWS Resilience, BCP & DR
PCI Responsibility Matrix - Salesforce Services 2024-07-31 First party, AWS PCI DSS
Vulnerability/Penetration Report Summary - Account Engagement (fka Pardot) 2024-07-29 AWS External Security Assessments
PCI Attestation of Compliance (AoC) - Heroku 2024-07-26 AWS PCI DSS
PCI Attestation of Compliance (AoC) - Salesforce.org Payment Services 2024-07-26 First party, AWS PCI DSS
PCI Responsibility Matrix - Heroku 2024-07-26 AWS PCI DSS
PCI Responsibility Matrix - Salesforce.org Payment Services 2024-07-26 First party, AWS PCI DSS
Vulnerability/Penetration Report Summary - Salesforce Authenticator (Andr./iOS) 2024-07-25 First party External Security Assessments
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
DR/BCP Summary - Commerce Cloud 2024-07-23 First party Resilience, BCP & DR
Vulnerability/Penetration Report Summary - Engagement (fka ExactTarget) 2024-07-23 First party External Security Assessments
PCI Attestation of Compliance (AoC) - Commerce Cloud on 1P 2024-07-16 First party PCI DSS
PCI Attestation of Compliance (AoC) - Salesforce Services 2024-07-16 First party, AWS PCI DSS
PCI Responsibility Matrix - Commerce Cloud on 1P 2024-07-16 First party PCI DSS
QC2 Certification 2024-07-16 AWS, Hyperforce Other Reports and Certificates
PCI ASV Network Scan - Hyperforce APAC (South 1) Mumbai, India 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (South East 1) Singapore) 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU South 1) Italy 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU West 3) France 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce LACA (SA East 1) Brazil 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce ME Central 1 -United Arab Emirates 2024-07-12 Hyperforce PCI DSS
Vulnerability/Penetration Report Summary - Messaging (LiveMessage) 2024-07-12 AWS External Security Assessments
Mulesoft IRAP Assessment letter 2024-07-11 AWS IRAP
TX-RAMP - Marketing Cloud Intelligence 2024-07-03 AWS TX-RAMP
TX-RAMP - Salesforce Services on Hyperforce 2024-07-03 Hyperforce TX-RAMP
TX-RAMP - Tableau Cloud on Hyperforce 2024-07-03 Hyperforce TX-RAMP
Vulnerability/Penetration Report Summary - Diffeo 2024-07-03 AWS External Security Assessments
HECVAT - Hyperforce 2024-07-02 Hyperforce FAQ's and White Papers
IRAP Assessment Report - Mulesoft 2024-07-02 AWS IRAP
Salesforce EU Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce UK Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Vulnerability/Penetration Report Summary - Sales Cloud Einstein Generative AI 2024-06-28 AWS, Hyperforce External Security Assessments
Vulnerability/Penetration Report Summary - Tableau Bridge 2024-06-28 First party External Security Assessments
Spain ENS High - Data Cloud 2024-06-27 Hyperforce Spain Esquema Nacional de Seguridad (ENS)
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
SOC 2 Report - Field Service 2024-06-24 AWS, Hyperforce SOC 2
SOC 2 Report - MC Intelligence (fka Datorama) 2024-06-24 AWS, Azure SOC 2
SOC 3 Report - Field Service 2024-06-24 AWS, Hyperforce SOC 3
SOC 3 Report - MC Intelligence (fka Datorama) 2024-06-24 AWS, Azure SOC 3
Vulnerability/Penetration Report Summary - B2C Einstein, Reports and Dashboard 2024-06-24 First party External Security Assessments
Vulnerability/Penetration Report Summary - Tableau Desktop Application 2024-06-24 First party External Security Assessments
UK NHS Data Security and Protection Toolkit (DSPT) 2024-06-21 First party, Hyperforce Other Reports and Certificates
Flexible Network Egress Allowlisting for Salesforce Orgs 2024-06-20 First party FAQ's and White Papers
TX-RAMP - Commerce Cloud Digital, CC Einstein, Commerce Cloud Managed 2024-06-20 AWS TX-RAMP
TX-RAMP - Data Cloud 2024-06-20 AWS TX-RAMP
TX-RAMP - Heroku 2024-06-20 AWS TX-RAMP
TX-RAMP - Marketing Cloud Advertising Studio on Hyperforce 2024-06-20 Hyperforce TX-RAMP
TX-RAMP - MuleSoft 2024-06-20 AWS TX-RAMP
SOC 2 Report - Marketing Cloud Einstein 2024-06-18 AWS SOC 2
SOC 2 Report - Marketing Cloud Engagement on Hyperforce + Marketing Cloud Growth 2024-06-18 Hyperforce SOC 2
SOC 2 Report - Quip 2024-06-18 AWS SOC 2
SOC 2 Report - Salesforce Maps 2024-06-18 AWS SOC 2
SOC 3 Report - Marketing Cloud Einstein 2024-06-18 AWS SOC 3
SOC 3 Report - Marketing Cloud Engagement on Hyperforce + Marketing Cloud Growth 2024-06-18 Hyperforce SOC 3
SOC 3 Report - Quip 2024-06-18 AWS SOC 3
SOC 3 Report - Salesforce Maps 2024-06-18 AWS SOC 3
Vulnerability/Penetration Report Summary - Advertising Studio 2024-06-18 First party External Security Assessments
SOC 2 Report - Personalization (fka Interaction Studio) 2024-06-13 AWS SOC 2
SOC 3 Report - Personalization (fka Interaction Studio) 2024-06-13 AWS SOC 3
Vulnerability/Penetration Report Summary - ClickSoftware FSE - WebApp & API 2024-06-13 AWS External Security Assessments
SOC 2 Report - Tableau 2024-06-12 AWS SOC 2
SOC 3 Report - Tableau 2024-06-12 AWS SOC 3
SOC 2 Report - ClickSoftware Field Service Edge 2024-06-10 AWS SOC 2
SOC 2 Report - Einstein Relationship Insights 2024-06-10 Hyperforce SOC 2
SOC 2 Report - Marketing Cloud Einstein on Hyperforce 2024-06-10 Hyperforce SOC 2
SOC 2 Report - Marketing Cloud Engagement (fka ExactTarget) 2024-06-10 First party SOC 2
SOC 2 Report - Social Studio 2024-06-10 First party SOC 2
SOC 3 Report - ClickSoftware Field Service Edge (FSE) 2024-06-10 AWS SOC 3
SOC 3 Report - Einstein Relationship Insights 2024-06-10 Hyperforce SOC 3
SOC 3 Report - Marketing Cloud Einstein on Hyperforce 2024-06-10 Hyperforce SOC 3
SOC 3 Report - Marketing Cloud Engagement (fka ExactTarget) 2024-06-10 First party SOC 3
SOC 3 Report - Social Studio 2024-06-10 First party SOC 3
Vulnerability/Penetration Report Summary - Vlocity Managed Packages 2024-06-03 First party External Security Assessments
Medical Information System Security Management Guideline (JP) 2024-05-30 First party FAQ's and White Papers
TX-RAMP - Salesforce Services and Additional Services 2024-05-29 First party, Hyperforce TX-RAMP
[Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI (JP) 2024-05-29 AWS, Hyperforce FAQ's and White Papers
TX-RAMP - Einstein Platform 2024-05-24 AWS TX-RAMP
ASP/SaaS Certificate (JP) 2024-05-21 First party, Hyperforce Other Reports and Certificates
SOC 2 Report - Tableau on Hyperforce 2024-05-21 Hyperforce SOC 2
SOC 3 Report - Tableau on Hyperforce 2024-05-21 Hyperforce SOC 3
SOC 3 Report - Spiff 2024-05-20 GCP SOC 3
IRAP Assessment Report - Salesforce Services on Japan DC 2024-05-13 First party IRAP
Vulnerability/Penetration Report Summary - Sales Cloud Einstein 2024-05-10 AWS External Security Assessments
[Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI 2024-05-02 AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - Service Cloud Einstein Generative AI 2024-05-01 AWS External Security Assessments
FISC Security Guidelines (Japan) - Salesforce Services 2024-04-26 First party FAQ's and White Papers
Vulnerability/Penetration Report Summary - Tableau Server 2024-04-16 First party External Security Assessments
ISO/IEC 27001/27017/27018 Certificate - Misc. Services 2024-04-15 AWS ISO 27001
Vulnerability/Penetration Report Summary - Social Studio 2024-04-15 First party External Security Assessments
HITRUST Certificate - Salesforce Services 2024-04-10 First party, AWS HITRUST
Vulnerability/Penetration Report Summary - Salesforce Maps Mobile (Andr./iOS) 2024-04-09 First party, AWS External Security Assessments
PrivacyMark Certificate (JP) 2024-04-08 First party, Hyperforce Other Reports and Certificates
TX-RAMP - Salesforce Marketing Cloud Engagement (fka ExactTarget) 2024-04-05 First party TX-RAMP
TX-RAMP - Tableau 2024-04-05 AWS TX-RAMP
Vulnerability/Penetration Report Summary - AI for Marketing (fka MC Einstein) 2024-04-05 AWS External Security Assessments
Data Cloud IRAP Cloud Security Assessment Letter 2024-03-27 Hyperforce IRAP
Marketing Cloud Engagement & MC Einstein IRAP Cloud Security Assessment Letter 2024-03-27 Hyperforce IRAP
CSA CAIQ - Salesforce Services 2024-03-22 First party, AWS CSA STAR
Vulnerability/Penetration Report Summary - Salesforce Maps 2024-03-22 First party, AWS External Security Assessments
HITRUST Certificate - Engagement 2024-03-21 First party HITRUST
Infrastructure and Sub-processors for Professional Services 2024-03-19 First party, AWS, Hyperforce GDPR
DoD IL2 - GovSlack 2024-03-14 AWS DoD IL2
FedRAMP - GovSlack (High) 2024-03-14 AWS FedRAMP High
FedRAMP - Salesforce Government Cloud Plus (High) 2024-03-14 AWS FedRAMP High
FedRAMP - Slack 2024-03-14 AWS FedRAMP Moderate
IRAP Assessment Report - Salesforce Data Cloud [PROTECTED] 2024-03-14 Hyperforce IRAP
US Dept. of Defense Cybersecurity Maturity Model (CMMC) & Salesforce Whitepaper 2024-03-14 First party, AWS FAQ's and White Papers
IRAP Assessment Report - Marketing Cloud Engagement and MC Einstein [PROTECTED] 2024-03-05 Hyperforce IRAP
Singapore Financial Services user guideline for Salesforce Services 2024-03-05 Hyperforce FAQ's and White Papers
SOC 2 Report - Einstein Bots 2024-02-22 AWS SOC 2
SOC 3 Report - Einstein Bots 2024-02-22 AWS SOC 3
Vulnerability/Penetration Report Summary - Einstein Vision, Language & Voice 2024-01-30 AWS External Security Assessments
ISO/IEC 27701:2019 Certificate - Slack 2024-01-29 AWS ISO 27001
Vulnerability/Penetration Report Summary - Salesforce Inbox Mobile (Andr./iOS) 2024-01-08 First party External Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Data Cloud (fka CDP) 2024-01-05 Hyperforce External Security Assessments
Vulnerability/Penetration Report Summary - Audience Studio (fka DMP, fka Krux) 2023-12-21 AWS External Security Assessments
SOC 2 Report - Audience Studio 2023-12-18 AWS SOC 2
SOC 3 Report - Audience Studio 2023-12-18 AWS SOC 3
Canadian Center for CyberSecurity Summary Report - Hyperforce Services 2023-12-14 Hyperforce CCCS Assessment
Vulnerability/Penetration Report Summary - Marketing Cloud Mobile (Andr./iOS) 2023-12-14 First party External Security Assessments
Vulnerability/Penetration Report Summary - Tableau CRM Mobile (Andr./iOS) 2023-12-05 First party External Security Assessments
Vulnerability/Penetration Report Summary-Personalization fka Interaction Studio 2023-12-04 AWS, Hyperforce External Security Assessments
CJIS - Salesforce Government Cloud Plus 2023-11-17 AWS CJIS
TX-RAMP - Salesforce for Higher Education Suite 2023-11-17 AWS TX-RAMP
TX-RAMP - Salesforce Government Cloud Plus 2023-11-17 AWS TX-RAMP
ISO/IEC 27001:2013 Certificate - Slack 2023-11-16 AWS ISO 27001
ISO/IEC 27017:2015 Certificate - Slack 2023-11-16 AWS ISO 27017
ISO/IEC 27018:2019 Certificate - Slack 2023-11-16 AWS ISO 27018
Vulnerability/Penetration Report Summary - CRM Analytics (fka Tableau CRM) 2023-11-15 First party External Security Assessments
CSA CAIQ - Salesforce Service - Hyperforce 2023-11-01 AWS, Hyperforce CSA STAR
Vulnerability/Penetration Report Summary - Mobile Shield (Andr./iOS) 2023-10-27 First party External Security Assessments
Vulnerability/Penetration Report Summary - Tableau Prep 2023-10-25 AWS External Security Assessments
Vulnerability/Penetration Report Summary - B2B Commerce Lightning (aka 1CB2B) 2023-10-05 First party External Security Assessments
Einstein GPT Security White Paper (JP) 2023-09-29 Hyperforce FAQ's and White Papers
PCI ASV Network Scan - Heroku 2023-09-08 AWS PCI DSS
Mulesoft ACSC Essential Eight Maturity report 2023-08-31 AWS IRAP
SOC 2 Report - Einstein.AI 2023-08-31 AWS SOC 2
SOC 3 Report - Einstein.AI 2023-08-31 AWS SOC 3
Vulnerability/Penetration Report Summary - Service Cloud Einstein 2023-08-26 AWS External Security Assessments
DOD IL5 - Salesforce Government Cloud Plus (Hyperforce) 2023-08-08 Hyperforce DoD IL5
FISC Security Guidelines (Japan) - Marketing Cloud 2023-08-03 First party FAQ's and White Papers
ACSC Essential Eight Maturity Report - Salesforce Services on AWS and Japan DC 2023-07-30 First party, AWS IRAP
DoD IL2 - MuleSoft Government Cloud 2023-07-27 AWS DoD IL2
DoD IL2 - Salesforce Government Cloud Plus 2023-07-27 AWS DoD IL2
DoD IL2 - Slack 2023-07-27 AWS DoD IL2
Security Perspective on the Shared Responsibility Model 2023-07-24 First party, AWS, Hyperforce FAQ's and White Papers
Data Privacy Framework (DPF) Registration 2023-07-17 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
Salesforce Services AWS and Japan DC IRAP Addendum Letter March 2023 2023-06-21 First party, AWS IRAP
ISMAP Cloud Service List - Heroku 2023-06-16 AWS ISMAP
CSA CAIQ - Tableau 2023-05-04 AWS CSA STAR
CyberGRX Assessment 2023-03-16 First party CyberGRX
CSA CAIQ - Mulesoft (EN) 2023-03-13 AWS CSA STAR
APEC Controller Certification - Salesforce 2023-03-07 First party, Hyperforce APEC Certification for Processors and Controllers
Canadian Center for CyberSecurity Summary Report - Salesforce Services 2023-02-17 AWS CCCS Assessment
Salesforce Services 21 C.F.R. PART 11 FAQ Overview 2023-02-17 First party, AWS, Hyperforce FAQ's and White Papers
DR Summary - Marketing Cloud Engagement (fka ExactTarget) 2023-02-13 First party Resilience, BCP & DR
SOC 2 Report - Einstein Platform 2023-02-06 AWS SOC 2
SOC 3 Report - Einstein Platform 2023-02-06 AWS SOC 3
CSA CAIQ - Engagement (EN) (fka ExactTarget) 2023-01-17 First party CSA STAR
SOC 1 Report - Government Cloud Plus 2022-12-19 AWS SOC 1
SOC 2 Report - Government Cloud Plus 2022-12-19 AWS SOC 2
SOC 3 Report - Government Cloud Plus 2022-12-19 AWS SOC 3
HITRUST Certificate - Government Cloud Plus 2022-12-05 AWS HITRUST
[Whitepaper] Tableau Cloud and the HIPAA Security Rule 2022-12-02 AWS HIPAA
Mulesoft IRAP Addendum Letter June 2022 2022-11-10 AWS IRAP
Salesforce Enterprise Security Overview (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
SOC 2 Report - Narrative Science 2022-08-18 AWS SOC 2
SOC 3 Report - Narrative Science 2022-08-18 AWS SOC 3
IRAP Engagement Letter - Salesforce Services on AWS and Japan DC 2022-08-17 First party, AWS IRAP
Vulnerability/Penetration Report Summary - myTrailhead 2022-08-16 AWS External Security Assessments
Vulnerability/Penetration Report Summary - Tableau Cloud CMEK (Encryption) 2022-08-11 AWS External Security Assessments
Account Engagement (fka Pardot) Security Overview 2022-08-05 AWS FAQ's and White Papers
Personalization (fka Interaction Studio) Security Overview 2022-08-05 AWS FAQ's and White Papers
Security Perspective on the Shared Responsibility Model (JP) 2022-08-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - Trailhead GO (Andr./iOS) 2022-07-26 AWS External Security Assessments
Vulnerability/Penetration Report Summary - 1CB2C (One Commerce) 2022-07-12 First party External Security Assessments
Salesforce Services IRAP Customer Configuration Guide [PROTECTED] 2022-06-05 Hyperforce IRAP
TISAX Assessment Results 2022-05-30 First party, AWS, Hyperforce TISAX
Securely Operating the MuleSoft Environment 2022-05-25 First party FAQ's and White Papers
NIST SP 800-171 Attestation Letter - Government Cloud Plus 2022-05-17 AWS NIST SP 800-171
NIST SP 800-171 Attestation Letter - MuleSoft Government Cloud 2022-05-17 AWS NIST SP 800-171
Vulnerability/Penetration Report Summary - Philanthropy Cloud Mobile (Andr./iOS) 2022-04-27 AWS External Security Assessments
SOC 1 Bridge (Gap) Letter - Government Cloud Plus 2022-04-01 AWS SOC 1
Vulnerability/Penetration Report Summary - ClickSoftware v8 - WebApp & API 2022-03-29 AWS External Security Assessments
Salesforce Enterprise Security Overview 2022-03-11 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Meeting Belgium Government Security Requirements 2022-03-07 First party, Hyperforce FAQ's and White Papers
CSA CAIQ - Heroku 2022-02-03 AWS CSA STAR
SOC 2 Report - Mobify (Commerce Cloud Managed Runtime) 2022-01-18 First party SOC 2
SOC 1 Bridge (Gap) Letter - Advertising Studio on Hyperforce 2022-01-03 Hyperforce SOC 1
Computerized System Validation Guideline (JP) 2021-12-02 First party FAQ's and White Papers
SOC 1 Report - Advertising Studio on Hyperforce 2021-12-01 Hyperforce SOC 1
IRAP Engagement letter - Salesforce Services on Hyperforce AU [PROTECTED] 2021-11-09 Hyperforce IRAP
Vulnerability/Penetration Report Summary - MacOS Tableau Desktop Application 2021-10-14 First party External Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Services Data Mask Add-on 2021-10-06 First party, AWS External Security Assessments
Salesforce Security Tips for Guest User Access Controls (JP) 2021-09-16 First party, AWS, Hyperforce FAQ's and White Papers
[Whitepaper] Tableau Secure Development 2021-09-08 AWS FAQ's and White Papers
CSA STAR Registry - Salesforce Services 2021-09-07 First party CSA STAR
Vulnerability/Penetration Report Summary - Omni Channel Inventory 2021-09-01 AWS, Hyperforce External Security Assessments
CSA CAIQ - Slack (EN) 2021-08-25 AWS CSA STAR
CSA STAR Registry - Slack 2021-08-25 AWS CSA STAR
Salesforce Security Tips for Guest User Access Controls 2021-06-17 First party, AWS, Hyperforce FAQ's and White Papers
CSA CAIQ - Audience Studio and Data Studio 2021-06-09 AWS CSA STAR
CSA CAIQ - Interaction Studio (EN) 2021-05-18 AWS CSA STAR
FedRAMP - MuleSoft Government Cloud 2021-05-04 AWS FedRAMP Moderate
Vulnerability Scan Report - Tableau Online 2021-03-09 AWS FAQ's and White Papers
IRS 1075 Attestation Letter - Government Cloud Plus 2021-02-02 AWS Other Reports and Certificates
PCI Attestation of Compliance (AoC) - Government Cloud Plus 2021-02-01 AWS, Hyperforce PCI DSS
SOC 2 Report (Type 1) - Workplace Command Center and Employee Wellness Check 2021-01-22 First party SOC 2
Vulnerability/Penetration Report Summary - Salesforce.org Philanthropy Cloud 2021-01-21 AWS External Security Assessments
DR Summary - Audience Studio 2020-12-11 AWS Resilience, BCP & DR
DR Summary - Social Studio 2020-10-12 First party Resilience, BCP & DR
DR Summary - Pardot 2020-10-09 AWS Resilience, BCP & DR
DR Summary - MC Intelligence (fka Datorama) 2020-09-09 AWS Resilience, BCP & DR
IRAP Customer Configuration User Guide Health Check [Official] 2020-08-04 First party, AWS IRAP
IRAP Customer Configuration User Guide [Official] 2020-08-04 First party, AWS IRAP
Security and Compliance Best Practices and FAQ - Work.com 2020-07-30 First party, AWS FAQ's and White Papers
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
APEC Processor Seal - Salesforce 2020-07-10 First party, Hyperforce APEC Certification for Processors and Controllers
SOC 2 Report (Type 1) - Salesforce.org 2020-04-30 First party, AWS SOC 2
NISC Common Standards for Government Agencies (JP) 2019-08-08 First party FAQ's and White Papers
CSA CAIQ - Pardot (EN) 2019-06-18 AWS CSA STAR
CSA CAIQ - Quip 2019-06-18 AWS CSA STAR
Financial Services Cloud Resources N/A First party, AWS, Hyperforce Financial Services Compliance