Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

FAQ's and White Papers

Security White Papers and FAQ's related to topics such as enterprise security, business continuity, ransomware, vulnerability management, incident management, security related implementation best practice and more.

Applicable documents by service

Filter this list

Sort by Updated On
Name Salesforce Secure Development Lifecycle Overview	Updated On 2023-11-01	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer 360 Data Manager Data Cloud Data.com Einstein Platform Heroku IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Services and Additional Services Tableau Vlocity
Name Salesforce Data Cloud Security White Paper (JP)	Updated On 2023-10-10	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Data Cloud Marketing Cloud Marketing Cloud Account Engagement MuleSoft Salesforce Services and Additional Services Slack Tableau
Name US Dept. of Defense Cybersecurity Maturity Model (CMMC) & Salesforce Whitepaper	Updated On 2023-10-10	Infrastructure First party, AWS	Services MuleSoft Government Cloud Salesforce Government Cloud Plus
Name Einstein GPT Security White Paper (JP)	Updated On 2023-09-29	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Einstein Platform Marketing Cloud Salesforce Services and Additional Services Slack Tableau
Name Salesforce Hyperforce Infrastructure and Platform Security White Paper	Updated On 2023-09-29	Infrastructure Hyperforce	Services B2B Commerce Customer 360 Data Manager Data Cloud Einstein Platform Marketing Cloud Salesforce Government Cloud Plus Salesforce Services and Additional Services
Name FISC Security Guidelines (Japan) - Marketing Cloud	Updated On 2023-08-03	Infrastructure First party	Services Marketing Cloud
Name Einstein GPT Security White Paper (EN)	Updated On 2023-08-01	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Einstein Platform Marketing Cloud Salesforce Services and Additional Services Slack Tableau
Name Salesforce Data Cloud Security White Paper (EN)	Updated On 2023-07-29	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Data Cloud Marketing Cloud Marketing Cloud Account Engagement MuleSoft Salesforce Services and Additional Services Slack Tableau
Name Salesforce Third Party Risk Management Overview	Updated On 2023-07-28	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud ClickSoftware Customer 360 Data Manager Data Cloud Data.com Einstein Platform Heroku IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement MuleSoft Salesforce Services and Additional Services Tableau Vlocity
Name Security Perspective on the Shared Responsibility Model	Updated On 2023-07-24	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer 360 Data Manager Data Cloud Data.com IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement Salesforce Services and Additional Services Vlocity
Name Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview	Updated On 2023-06-12	Infrastructure First party, AWS	Services B2C Commerce / Commerce Cloud Marketing Cloud MuleSoft Salesforce Services and Additional Services
Name Salesforce Services Hyperforce Storage Encryption Summary	Updated On 2023-05-23	Infrastructure AWS, Hyperforce	Services Salesforce Services and Additional Services
Name FISC Security Guidelines (Japan) - Salesforce Services	Updated On 2023-05-17	Infrastructure First party	Services Salesforce Services and Additional Services
Name Salesforce Ransomware Mitigation Summary	Updated On 2023-04-13	Infrastructure First party, AWS, Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Salesforce Services and Additional Services
Name Salesforce Services 21 C.F.R. PART 11 FAQ Overview	Updated On 2023-02-17	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services and Additional Services
Name Salesforce Vulnerability Management Program Overview	Updated On 2022-12-12	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud ClickSoftware Customer 360 Data Manager Data Cloud Data.com Einstein Platform Heroku IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement MuleSoft Salesforce Services and Additional Services Tableau Vlocity
Name Salesforce Services First Party Storage Encryption Summary	Updated On 2022-11-14	Infrastructure First party	Services Salesforce Services and Additional Services
Name Salesforce Security (Incident) Response Plan	Updated On 2022-11-01	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud ClickSoftware Customer 360 Data Manager Data Cloud Data.com Einstein Platform Heroku IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Services and Additional Services Tableau Vlocity
Name Customer Guide for Incident Notification	Updated On 2022-10-07	Infrastructure First party, AWS	Services Data Cloud Salesforce Government Cloud Plus Salesforce Services and Additional Services
Name Salesforce Enterprise Security Overview (Japanese)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce Marketing Cloud Marketing Cloud Account Engagement Salesforce Services and Additional Services
Name Salesforce Security (Incident) Response Plan (Japanese)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud ClickSoftware Customer 360 Data Manager Data Cloud Data.com Einstein Platform Heroku IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Services and Additional Services Tableau Vlocity
Name Account Engagement (formerly known as Pardot) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Services Marketing Cloud Account Engagement
Name Personalization (formerly Interaction Studio) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Services Marketing Cloud
Name Security Perspective on the Shared Responsibility Model (Japanese)	Updated On 2022-08-02	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer 360 Data Manager Data Cloud Data.com IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement Salesforce Services and Additional Services Vlocity
Name Securely Operating the MuleSoft Environment	Updated On 2022-05-25	Infrastructure First party	Services MuleSoft
Name UK Cloud Security Principles	Updated On 2022-04-19	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services and Additional Services
Name Salesforce Enterprise Security Overview	Updated On 2022-03-11	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce Marketing Cloud Marketing Cloud Account Engagement Salesforce Services and Additional Services
Name Salesforce Meeting Belgium Government Security Requirements	Updated On 2022-03-07	Infrastructure First party, Hyperforce	Services Salesforce Services and Additional Services
Name Computerized System Validation Guideline (Japan)	Updated On 2021-12-02	Infrastructure First party	Services Salesforce Services and Additional Services
Name Vulnerability Management and Response Plan Summary	Updated On 2021-09-27	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer 360 Data Manager Data Cloud Data.com Einstein Platform Heroku IoT Cloud LiveMessage, myTrailhead, Salesforce Anywhere, Quip, Philan. Cloud and Elevate Marketing Cloud Marketing Cloud Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Services and Additional Services Tableau
Name Salesforce Security Tips for Guest User Access Controls (Japan)	Updated On 2021-09-16	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services and Additional Services
Name [Whitepaper] Tableau Secure Development	Updated On 2021-09-08	Infrastructure AWS	Services Tableau
Name [Whitepaper] Security at Slack	Updated On 2021-08-25	Infrastructure AWS	Services Slack
Name Medical Information System Security Management Guideline (Japan)	Updated On 2021-08-05	Infrastructure First party	Services Salesforce Services and Additional Services
Name Salesforce Services SWIPO Data Portability Transparency Statement	Updated On 2021-07-27	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services and Additional Services
Name Salesforce Security Tips for Guest User Access Controls	Updated On 2021-06-17	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services and Additional Services
Name Vulnerability Scan Report - Tableau Online	Updated On 2021-03-09	Infrastructure AWS	Services Tableau
Name Security and Compliance Best Practices and FAQ - Work.com	Updated On 2020-07-30	Infrastructure First party, AWS	Services Salesforce Services and Additional Services
Name NISC Common Standards for Government Agencies (Japan)	Updated On 2019-08-08	Infrastructure First party	Services Salesforce Services and Additional Services