Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

External Security Assessments

Attestation of penetration tests and security assessments performed by third parties. The document does not contain details of any vulnerabilities or findings and is intended only to provide information on the tests performed and scope of testing. As verified by external audits, vulnerabilities discovered during testing are tracked and resolved in accordance with corporate policy and industry best practice.

Applicable documents by service

Filter this list

Sort by Updated On
Name Vulnerability/Penetration Report Summary - Spiff	Updated On 2025-07-24	Infrastructure GCP	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Slack	Updated On 2025-06-16	Infrastructure AWS	Services Slack
Name Vulnerability/Penetration Report Summary - Marketing Cloud Growth	Updated On 2025-06-13	Infrastructure Hyperforce	Services Marketing Cloud - Growth
Name Vulnerability/Penetration Report Summary - Salesforce Services (Full Scope)	Updated On 2025-06-12	Infrastructure First party, AWS, Hyperforce	Services Data Cloud Salesforce Government Cloud Plus Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Sales Cloud Einstein & Generative AI	Updated On 2025-06-11	Infrastructure AWS, Hyperforce	Services Agentforce & Einstein Platform
Name Vulnerability/Penetration Report Summary - Tableau Desktop Application	Updated On 2025-06-10	Infrastructure First party	Services Tableau Cloud
Name Vulnerability/Penetration Report Summary - OwnCompany Inc.	Updated On 2025-06-02	Infrastructure AWS	Services Own by Salesforce
Name Vulnerability/Penetration Report Summary - MC Intelligence (fka Datorama)	Updated On 2025-05-29	Infrastructure AWS	Services Marketing Cloud - Intelligence
Name Vulnerability/Penetration Report Summary-Service Cloud Einstein & Generative AI	Updated On 2025-05-16	Infrastructure AWS	Services Agentforce & Einstein Platform
Name Vulnerability/Penetration Report Summary - Vlocity Managed Packages	Updated On 2025-05-16	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Tableau Cloud Private Connect	Updated On 2025-05-15	Infrastructure AWS, Hyperforce	Services Tableau Cloud
Name Vulnerability/Penetration Report Summary - Salesforce Services (+12M Retest)	Updated On 2025-05-14	Infrastructure First party, AWS, Hyperforce	Services Salesforce Government Cloud Plus Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Einstein Vision, Language & Voice	Updated On 2025-05-09	Infrastructure AWS	Services Agentforce & Einstein Platform
Name Vulnerability/Penetration Report Summary - Tableau Prep	Updated On 2025-03-31	Infrastructure AWS	Services Tableau Cloud
Name Vuln/Pen Report Summary - B2B, D2C, SOM, GenAI and Einstein for Commerce	Updated On 2025-03-18	Infrastructure First party, Hyperforce	Services B2C Commerce / Commerce Cloud (First Party)
Name Vulnerability/Penetration Report Summary - Field Service Lightning (Andr./iOS)	Updated On 2025-03-14	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - B2B Commerce (CloudCraze)	Updated On 2025-03-12	Infrastructure First party	Services B2C Commerce / Commerce Cloud (First Party)
Name Vulnerability/Penetration Report Summary - Mobile Publisher (Andr./iOS)	Updated On 2025-03-11	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Salesforce Mobile (Andr./iOS)	Updated On 2025-03-11	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Tableau Cloud	Updated On 2025-02-24	Infrastructure AWS	Services Tableau Cloud
Name Vulnerability/Penetration Report Summary - Engagement Web APIs (fka ExactTarget)	Updated On 2025-02-10	Infrastructure First party	Services Marketing Cloud - Engagement (First Party)
Name Vulnerability/Penetration Report Summary - Quip	Updated On 2025-02-06	Infrastructure AWS	Services Quip
Name Vulnerability/Penetration Report Summary - B2C Mobify	Updated On 2025-02-05	Infrastructure AWS	Services B2C Commerce / Commerce Cloud (First Party)
Name Vulnerability/Penetration Report Summary - Heroku	Updated On 2025-01-21	Infrastructure AWS	Services Heroku
Name Vulnerability/Penetration Report Summary - Tableau Mobile (iOS/Android/Intune)	Updated On 2024-12-10	Infrastructure AWS	Services Tableau Cloud
Name Vulnerability/Penetration Report Summary - MuleSoft	Updated On 2024-12-05	Infrastructure AWS	Services MuleSoft
Name Vulnerability/Penetration Report Summary - OpenAI	Updated On 2024-11-25	Infrastructure AWS	Services Agentforce & Einstein Platform Data Cloud Marketing Cloud - Account Engagement MuleSoft Government Cloud Tableau Cloud
Name Vulnerability/Penetration Report Summary - Agentforce	Updated On 2024-11-13	Infrastructure Hyperforce	Services Agentforce & Einstein Platform Data Cloud Marketing Cloud - Account Engagement Slack Tableau Cloud
Name Vulnerability/Penetration Report Summary - RCG Industries	Updated On 2024-09-24	Infrastructure First party, Hyperforce	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Tableau Pulse	Updated On 2024-09-09	Infrastructure AWS	Services Tableau Cloud
Name Vulnerability/Penetration Report Summary - B2C Business Manager + OCAPI + SFRA	Updated On 2024-08-01	Infrastructure First party, AWS	Services B2C Commerce / Commerce Cloud (First Party)
Name Vulnerability/Penetration Report Summary - Account Engagement (fka Pardot)	Updated On 2024-07-29	Infrastructure AWS	Services Marketing Cloud - Account Engagement
Name Vulnerability/Penetration Report Summary - Salesforce Authenticator (Andr./iOS)	Updated On 2024-07-25	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Engagement (fka ExactTarget)	Updated On 2024-07-23	Infrastructure First party	Services Marketing Cloud - Engagement (First Party)
Name Vulnerability/Penetration Report Summary - Messaging (LiveMessage)	Updated On 2024-07-12	Infrastructure AWS	Services Salesforce Services (First Party)
Name Vulnerability/Penetration Report Summary - Diffeo	Updated On 2024-07-03	Infrastructure AWS	Services Agentforce & Einstein Platform
Name Vulnerability/Penetration Report Summary - Tableau Bridge	Updated On 2024-06-28	Infrastructure First party	Services Tableau Cloud
Name Vulnerability/Penetration Report Summary - B2C Einstein, Reports and Dashboard	Updated On 2024-06-24	Infrastructure First party	Services B2C Commerce / Commerce Cloud (First Party)
Name Vulnerability/Penetration Report Summary - Advertising Studio	Updated On 2024-06-18	Infrastructure First party	Services Marketing Cloud - Advertising
Name Vulnerability/Penetration Report Summary - ClickSoftware FSE - WebApp & API	Updated On 2024-06-13	Infrastructure AWS	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Tableau Server	Updated On 2024-04-16	Infrastructure First party	Services Tableau Server
Name Vulnerability/Penetration Report Summary - Salesforce Maps Mobile (Andr./iOS)	Updated On 2024-04-09	Infrastructure First party, AWS	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - AI for Marketing (fka MC Einstein)	Updated On 2024-04-05	Infrastructure AWS	Services Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce)
Name Vulnerability/Penetration Report Summary - Salesforce Maps	Updated On 2024-03-22	Infrastructure First party, AWS	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Vulnerability/Penetration Report Summary - Salesforce Inbox Mobile (Andr./iOS)	Updated On 2024-01-08	Infrastructure First party	Services Agentforce & Einstein Platform
Name Vulnerability/Penetration Report Summary - Salesforce Data Cloud (fka CDP)	Updated On 2024-01-05	Infrastructure Hyperforce	Services Data Cloud