ISO/IEC 27018:2019 Certificate

The International Organization for Standardization 27018 Standard (ISO 27018) covers privacy protections for the processing of personal information by cloud service providers.

Files

Available versions for download

Reporting Start Date	Reporting End Date	Updated On	Notes	Actions
2026-03-10	2027-01-27	2026-04-18	-	Login to download

Services covered

Services related to this document

Agentforce & Einstein Platform

Applicable to the services and features branded as: Agentforce (collectively, “Agentforce”) which includes the following features: Agentforce Assistant, Agentforce Sales Coach, Agentforce SDR, Agent

B2C Commerce / Commerce Cloud (Hyperforce)

Applicable to the services branded as B2C Commerce/Commerce Cloud on Hyperforce

Data Cloud

Applicable to the services branded as Data Cloud, Customer Data Cloud (aka Salesforce Data Cloud), or Customer Data Platform (formerly branded as Salesforce CDP).

General (not service specific)

Applicable to Salesforce as an entity without the context of a specific service (Corporate Services)

Heroku

Applicable to the services branded as Heroku.

Marketing Cloud - Account Engagement

Applicable to the services branded as Marketing Cloud Account Engagement (formerly branded as Pardot).

Marketing Cloud - Advertising

Applicable to the services branded as Marketing Cloud - Advertising

Marketing Cloud - Advertising

Applicable to the services branded as Marketing Cloud - Advertising

Marketing Cloud - Engagement (First Party)

Applicable to the services branded as Marketing Cloud - Engagement

Marketing Cloud - Engagement (Hyperforce)

Applicable to the services branded as Marketing Cloud - Engagement

Marketing Cloud - Growth Edition and Marketing Cloud Advanced Edition

Applicable to the services branded as Marketing Cloud Growth Edition and Marketing Cloud Advanced Edition

Marketing Cloud - Intelligence

Applicable to the services branded as Marketing Cloud - Intelligence

MuleSoft

Applicable to the services branded as MuleSoft or the Anypoint Platform (MuleSoft Services).

Quip

Applicable to the services branded as Quip

Salesforce Professional Services

Applicable to professional services performed by SFDC, its Affiliates, or its or their respective permitted subcontractors under an SOW or Order Form, including the provision of any Deliverables speci

Salesforce Services (First Party)

Applicable to the core salesforce services branded as B2B Commerce on Lightning Experience, Chatter, Consumer Good Cloud, Customer 360 Audiences (Salesforce UCI Org SPARC), Database.com, Einstein Rela

Salesforce Services (Hyperforce)

Tableau Cloud

Applicable to the services branded as Tableau Cloud

Tableau Next

Applicable to the services branded as Tableau Next, including the underlying Data Cloud, Tableau Semantics and Agentforce Services.