Trust | Compliance

CertificationsServicesDocuments

Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Documents

Sort by:
Document
Sort by:
Last Updated
InfrastructureSort by:
Certification
Sort by:
Service
SOC1 Customer Update Letter - B2C
2021-04-08
First party
SOC 1SOC 1
PCI Attestation of Compliance (AoC) - Salesforce Services on Hyperforce
2021-04-01
Hyperforce
PCI DSSPCI DSS
PCI Responsibility Matrix - Salesforce Services on Hyperforce
2021-04-01
Hyperforce
PCI DSSPCI DSS
SOC 1 Bridge (Gap) Letter - Corporate & Salesforce Services
2021-03-31
First party, AWS
SOC 1SOC 1
Show more
SOC 1 Bridge (Gap) Letter - Government Cloud Plus
2021-03-31
First party
SOC 1SOC 1
SOC 1 Bridge (Gap) Letter - Heroku
2021-03-31
AWS
SOC 1SOC 1
SOC 1 Bridge (Gap) Letter - Mulesoft
2021-03-31
AWS
SOC 1SOC 1
ASIP Santé HDS Certificate
2021-03-29
First party, AWS, Hyperforce
ASIP Santé HDSASIP Santé HDS
Show more
ISO 27001:2013 Certificate
2021-03-29
First party, AWS, Hyperforce
ISO 27001ISO 27001
Show more
ISO 27017:2015 Certificate
2021-03-29
First party, AWS, Hyperforce
ISO 27017ISO 27017
Show more
ISO 27018:2019 Certificate
2021-03-29
First party, AWS, Hyperforce
ISO 27018ISO 27018
Show more
NEN 7510-1:2017 Certificate
2021-03-29
First party, AWS, Hyperforce
NEN 7510NEN 7510
Show more
DR Test Summary 2020 - MuleSoft
2021-03-23
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
ISMAP Cloud Service List
2021-03-18
First party, AWS
ISMAPISMAP
Vulnerability/Penetration Report Summary - Customer 360 Audiences
2021-03-17
Hyperforce
External Security AssessmentsExternal Security Assessments
SOC 1 Report - Customer 360 Audiences
2021-03-16
Hyperforce
SOC 1SOC 1
SOC 2 Report - Customer 360 Audiences
2021-03-16
Hyperforce
SOC 2SOC 2
SOC 3 Report - Customer 360 Audiences
2021-03-16
Hyperforce
SOC 3SOC 3
ISO Statement of Applicability - V2.9 (English)
2021-03-15
First party, AWS, Hyperforce
ISO 27001ISO 27001
Show more
ISO Statement of Applicability - V2.9 (French)
2021-03-15
First party, AWS, Hyperforce
ISO 27001ISO 27001
Show more
Vulnerability Scan Report - Tableau Online
2021-03-09
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
DR/BCP Summary - Salesforce Services
2021-03-04
First party, AWS
Disaster Recovery & BCPDisaster Recovery & BCP
PCI Responsibility Matrix - Salesforce.org Payment Services
2021-03-02
AWS
PCI DSSPCI DSS
SOC 1 Bridge (Gap) Letter - Commerce Cloud
2021-03-01
First party
SOC 1SOC 1
DR Testing (Site Switching) Summary
2021-02-26
First party, AWS
Disaster Recovery & BCPDisaster Recovery & BCP
SOC 1 Report - Commerce Cloud Digital
2021-02-26
First party
SOC 1SOC 1
SOC 2 Report - Commerce Cloud Digital
2021-02-26
First party
SOC 2SOC 2
SOC 2 Report - Commerce Cloud Order Management
2021-02-26
First party
SOC 2SOC 2
SOC 3 Report - Commerce Cloud Digital
2021-02-26
First party
SOC 3SOC 3
SOC 3 Report - Commerce Cloud Order Management
2021-02-26
First party
SOC 3SOC 3
SOC 3 Report - Interaction Studio
2021-02-26
AWS
SOC 3SOC 3
SOC 3 Report - Vlocity Digital Commerce Gateway & Order Management Plus
2021-02-26
First party
SOC 3SOC 3
Vulnerability/Penetration Report Summary - ClickSoftware FSE - WebApp & API
2021-02-23
First party
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Interaction Studio
2021-02-22
AWS
External Security AssessmentsExternal Security Assessments
DR Summary - Tableau
2021-02-19
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
PCI Responsibility Matrix - MuleSoft
2021-02-17
AWS
PCI DSSPCI DSS
SOC 2 Report - Interaction Studio
2021-02-17
AWS
SOC 2SOC 2
DR Summary - MuleSoft
2021-02-12
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
Vulnerability/Penetration Report Summary - Heroku
2021-02-12
AWS
External Security AssessmentsExternal Security Assessments
UK Cloud Security Principles
2021-02-11
First party, AWS, Hyperforce
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
DR Summary - MuleSoft
2021-02-05
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
PCI Attestation of Compliance (AoC) - Mobify
2021-02-04
First party
PCI DSSPCI DSS
IRS 1075 Attestation Letter - Government Cloud Plus
2021-02-02
First party
IRS 1075IRS 1075
NIST SP 800-171 Attestation Letter - Government Cloud Plus
2021-02-01
First party
NIST SP 800-171NIST SP 800-171
PCI Attestation of Compliance (AoC) - Government Cloud Plus
2021-02-01
First party
PCI DSSPCI DSS
SOC 3 Report - Government Cloud Plus
2021-02-01
First party
SOC 3SOC 3
C5 (ISAE 3000) Report - Salesforce Services
2021-01-29
First party, AWS
C5 (ISAE 3000)C5 (ISAE 3000)
DR Summary - ExactTarget
2021-01-27
First party
Disaster Recovery & BCPDisaster Recovery & BCP
SOC 1 Report - Mulesoft
2021-01-27
AWS
SOC 1SOC 1
SOC 2 Report - Mulesoft
2021-01-27
AWS
SOC 2SOC 2
SOC 3 Report - MuleSoft
2021-01-27
AWS
SOC 3SOC 3
PCI Attestation of Compliance (AoC) - MuleSoft
2021-01-26
AWS
PCI DSSPCI DSS
Vulnerability/Penetration Report Summary - Tableau Mobile (Android)
2021-01-26
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Tableau Mobile (iOS)
2021-01-26
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Tableau Online (TOL)
2021-01-26
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Tableau Server
2021-01-26
First party, AWS, Hyperforce
External Security AssessmentsExternal Security Assessments
SOC 2 Report (Type 1) - Workplace Command Center and Employee Wellness Check
2021-01-22
First party
SOC 2SOC 2
Vulnerability/Penetration Report Summary - Salesforce.org Philanthropy Cloud
2021-01-21
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary-Hyperforce/Unified Cloud Infrastructure
2021-01-13
Hyperforce
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Quip
2021-01-12
AWS
External Security AssessmentsExternal Security Assessments
DR Summary - Heroku
2021-01-07
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
SOC 1 Report - Salesforce Services
2021-01-07
First party, AWS
SOC 1SOC 1
Show more
SOC 2 Report - Salesforce Services
2021-01-07
First party, AWS
SOC 2SOC 2
Show more
SOC 3 Report - Salesforce Services
2021-01-07
First party, AWS
SOC 3SOC 3
HITRUST Certificate - ExactTarget
2021-01-06
First party
HITRUSTHITRUST
HITRUST Certificate - Salesforce Services
2021-01-06
First party, AWS
HITRUSTHITRUST
SOC 1 Report - Heroku
2021-01-05
AWS
SOC 1SOC 1
SOC 2 Report - Heroku
2021-01-05
AWS
SOC 2SOC 2
SOC 3 Report - Heroku
2021-01-05
AWS
SOC 3SOC 3
Salesforce Binding Corporate Rules
2021-01-01
First party, AWS, Hyperforce
Salesforce BCRsSalesforce BCRs
Show more
Vulnerability/Penetration Report Summary - Salesforce Services
2020-12-22
First party, AWS
External Security AssessmentsExternal Security Assessments
Show more
Vulnerability/Penetration Report Summary - Tableau CRM Mobile (Andr./iOS)
2020-12-22
First party
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Field Service Lightning (Andr./iOS)
2020-12-21
First party
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Mobile (Andr./iOS)
2020-12-21
First party
External Security AssessmentsExternal Security Assessments
Network Vulnerability Assessment
2020-12-20
First party, AWS
PCI DSSPCI DSS
SOC 2 Report (Type 1) - Field Service
2020-12-18
AWS
SOC 2SOC 2
SOC 2 Report (Type 1) - Vlocity Managed Packages
2020-12-18
First party
SOC 2SOC 2
SOC 2 Report - Vlocity Digital Commerce Gateway & Order Management Plus
2020-12-18
AWS
SOC 2SOC 2
Vulnerability/Penetration Report Summary - Salesforce Authenticator (Andr./iOS)
2020-12-18
First party
External Security AssessmentsExternal Security Assessments
SOC 1 Report - Corporate Services
2020-12-15
First party, AWS, Hyperforce
SOC 1SOC 1
Show more
SOC 2 Report - Audience Studio
2020-12-15
AWS
SOC 2SOC 2
SOC 2 Report - Corporate Services
2020-12-15
First party, AWS, Hyperforce
SOC 2SOC 2
Show more
SOC 2 Report - ExactTarget and Advertising Studio
2020-12-15
First party
SOC 2SOC 2
SOC 2 Report - Pardot
2020-12-15
AWS
SOC 2SOC 2
SOC 2 Report (Type 1) - Einstein Bots
2020-12-15
AWS
SOC 2SOC 2
Vulnerability/Penetration Report Summary - Advertising Studio
2020-12-15
First party
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - ExactTarget
2020-12-15
First party
External Security AssessmentsExternal Security Assessments
DR Summary - Audience Studio
2020-12-11
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
Vulnerability/Penetration Report Summary - Audience Studio and Data Studio
2020-12-11
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Predictive Intelligence
2020-12-11
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Social Studio
2020-12-11
First party
External Security AssessmentsExternal Security Assessments
BCP Summary
2020-12-08
First party, AWS, Hyperforce
Disaster Recovery & BCPDisaster Recovery & BCP
Show more
Network Vulnerability Assessment - Heroku
2020-12-03
AWS
PCI DSSPCI DSS
ISO Statement of Applicability - V2.8 (English)
2020-11-13
First party, AWS
ISO 27001ISO 27001
Show more
ISO Statement of Applicability - V2.8 (French)
2020-11-13
First party, AWS
ISO 27001ISO 27001
Show more
SOC 3 Report - Datorama
2020-11-10
AWS
SOC 3SOC 3
SOC 3 Report - Einstein.AI
2020-11-10
AWS
SOC 3SOC 3
SOC 3 Report - Einstein Platform
2020-11-10
AWS
SOC 3SOC 3
SOC 3 Report - Quip
2020-11-10
AWS
SOC 3SOC 3
Vulnerability/Penetration Report Summary - MuleSoft
2020-11-10
AWS
External Security AssessmentsExternal Security Assessments
CSA CAIQ - Tableau
2020-10-23
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
PCI Responsibility Matrix - Heroku
2020-10-14
AWS
PCI DSSPCI DSS
DR Summary - Social Studio
2020-10-12
First party
Disaster Recovery & BCPDisaster Recovery & BCP
DR Summary - Pardot
2020-10-09
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
Vulnerability/Penetration Report Summary - myTrailhead
2020-10-06
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Services Data Mask Add-on
2020-10-05
First party, AWS
External Security AssessmentsExternal Security Assessments
CSA CAIQ - Salesforce Services
2020-09-24
First party, AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CSA CAIQ - Mulesoft (EN)
2020-09-17
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
DR Summary - Datorama
2020-09-09
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
Vulnerability/Penetration Report Summary - B2B Commerce
2020-09-09
First party
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Tableau CRM
2020-08-26
AWS
External Security AssessmentsExternal Security Assessments
PCI Attestation of Compliance (AoC) - Salesforce.org Payment Services
2020-08-13
AWS
PCI DSSPCI DSS
SOC 2 Report - ClickSoftware
2020-08-13
First party
SOC 2SOC 2
PCI Attestation of Compliance (AoC) - Commerce Cloud
2020-08-07
First party
PCI DSSPCI DSS
Vulnerability/Penetration Report Summary - Messaging and LiveMessage
2020-08-07
AWS
External Security AssessmentsExternal Security Assessments
Show more
IRAP Assessment letter [Official]
2020-08-04
First party, AWS
IRAPIRAP
IRAP Customer Configuration User Guide Health Check [Official]
2020-08-04
First party, AWS
IRAPIRAP
IRAP Customer Configuration User Guide [Official]
2020-08-04
First party, AWS
IRAPIRAP
Salesforce ASD Essential Eight Maturity report
2020-08-04
First party, AWS
IRAPIRAP
Salesforce Services IRAP Assessment Report [Official]
2020-08-04
First party, AWS
IRAPIRAP
Vulnerability/Penetration Report Summary - Datorama
2020-08-04
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Einstein Vision, Language & Voice
2020-08-03
AWS
External Security AssessmentsExternal Security Assessments
Security and Compliance Best Practices and FAQ - Work.com
2020-07-30
First party, AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
Vulnerability/Penetration Report Summary - Pardot
2020-07-24
AWS
External Security AssessmentsExternal Security Assessments
UK Cyber Essentials Plus Certificate
2020-07-17
First party, AWS, Hyperforce
UK Cyber Essentials PlusUK Cyber Essentials Plus
International Transfers of EU Personal Data to Salesforce's Services FAQ
2020-07-16
First party, AWS, Hyperforce
Privacy ShieldPrivacy Shield
Show more
PCI Attestation of Compliance (AoC) - Salesforce Services
2020-07-15
First party, AWS
PCI DSSPCI DSS
Show more
PCI Responsibility Matrix - Salesforce Services
2020-07-15
First party, AWS
PCI DSSPCI DSS
Show more
SOC 2 Report - Datorama
2020-07-15
AWS
SOC 2SOC 2
TRUSTe APEC Processor Seal
2020-07-10
First party
TRUSTe APEC Processor SealTRUSTe APEC Processor Seal
Show more
PCI Attestation of Compliance (AoC) - Heroku
2020-07-08
AWS
PCI DSSPCI DSS
SOC 2 Report - Einstein.AI
2020-07-07
AWS
SOC 2SOC 2
SOC 2 Report - Einstein Platform
2020-07-07
AWS
SOC 2SOC 2
SOC 2 Report - Predictive Intelligence
2020-07-06
AWS
SOC 2SOC 2
SOC 2 Report - Social Studio
2020-07-06
First party
SOC 2SOC 2
SOC 2 Report - Quip
2020-07-01
AWS
SOC 2SOC 2
FedRAMP Government Cloud Plus
2020-06-17
First party
FedRAMP HighFedRAMP High
DoD IL2 Government Cloud
2020-06-11
First party
DoD IL2DoD IL2
DoD IL2 Government Cloud Plus
2020-06-11
First party
DoD IL2DoD IL2
DoD IL4
2020-06-11
First party
DoD IL4DoD IL4
FedRAMP Government Cloud
2020-06-10
First party
FedRAMP ModerateFedRAMP Moderate
SOC 2 Report - Tableau
2020-06-05
AWS
SOC 2SOC 2
SOC 3 Report - Tableau
2020-06-05
AWS
SOC 3SOC 3
Vulnerability Response Plan Summary
2020-05-31
First party, AWS, Hyperforce
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
Show more
ASP/SaaS Certificate (Japan)
2020-05-16
First party
ASP/SaaSASP/SaaS
PrivacyMark Certificate (Japan)
2020-05-12
First party
PrivacyMarkPrivacyMark
SOC 1 Report - Government Cloud Plus
2020-04-30
First party
SOC 1SOC 1
SOC 2 Report - Government Cloud Plus
2020-04-30
First party
SOC 2SOC 2
SOC 2 Report (Type 1) - Salesforce Maps
2020-04-30
AWS
SOC 2SOC 2
SOC 2 Report (Type 1) - Salesforce.org
2020-04-30
First party, AWS
SOC 2SOC 2
Vulnerability/Penetration Report Summary - Service Cloud Einstein
2020-04-20
AWS
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Sales Cloud Einstein
2020-04-17
AWS
External Security AssessmentsExternal Security Assessments
DR/BCP Summary - Commerce Cloud
2020-04-13
First party
Disaster Recovery & BCPDisaster Recovery & BCP
CSA CAIQ - Heroku
2020-02-28
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
Vulnerability/Penetration Report Summary - Marketing Cloud Mobile (Andr./iOS)
2020-02-25
First party
External Security AssessmentsExternal Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Events Mobile (Andr./iOS)
2020-02-18
First party
External Security AssessmentsExternal Security Assessments
BCP Summary - Mulesoft
2020-01-29
AWS
Disaster Recovery & BCPDisaster Recovery & BCP
ISO 27001/27017/27018 Certificate - Misc. Services
2020-01-21
AWS
ISO 27001ISO 27001
CSA CAIQ - ExactTarget (EN)
2020-01-17
First party
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CSA CAIQ - ExactTarget (JP)
2020-01-17
First party
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
Vulnerability/Penetration Report Summary - Salesforce Inbox Mobile (Andr./iOS)
2019-12-20
First party
External Security AssessmentsExternal Security Assessments
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud
2019-11-01
First party, AWS
HIPAAHIPAA
Show more
PCI Responsibility Matrix - Commerce Cloud
2019-10-01
First party
PCI DSSPCI DSS
Incident Response Plan Summary
2019-09-16
First party, AWS, Hyperforce
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
Show more
CSA CAIQ - Mulesoft (JP)
2019-09-10
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
NISC Security Standard (Japan)
2019-08-08
First party
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CSA CAIQ - Pardot (EN)
2019-06-18
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CSA CAIQ - Pardot (JP)
2019-06-18
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CSA CAIQ - Quip
2019-06-18
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CSA CAIQ - Audience Studio and Data Studio
2019-05-01
AWS
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
FISC (Japan)
2019-02-26
First party
Standard Questionnaires, FAQ's and WhitepapersStandard Questionnaires, FAQ's and Whitepapers
CS Gold Mark License (Japan)
2018-09-26
First party
CS Gold MarkCS Gold Mark
Vulnerability/Penetration Report Summary - Einstein Discovery
2017-12-07
AWS
External Security AssessmentsExternal Security Assessments
Financial Services Cloud Resources
N/A
First party, AWS, Hyperforce
Financial Services ComplianceFinancial Services Compliance
GDPR - Data Protection Impact Assessments & Salesforce Services
N/A
First party, AWS, Hyperforce
GDPRGDPR
Show more
[Video] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud
N/A
First party, AWS
HIPAAHIPAA
Show more

Additional Information

Trailhead

Salesforce.com | Careers | Privacy Information

© Copyright 2021 Salesforce.com, inc. All rights reserved.