Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.
SOC 2 Report - Quip
The American Institute of Certified Public Accountants (AICPA) Service Organization Controls (SOC) reports give assurance over control environments as they relate to the retrieval, storage, processing, and transfer of data. The reports cover IT General controls and controls around availability, confidentiality and security of customer data. The SOC 2 reports cover controls around security, availability, and confidentiality of customer data.
Please note the "SOC 2 Report - Quip" is moving from a six month period to an annual period. The new SOC2 period is May 1st to April 30th, with the next report being released in 2021.