Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

FAQ's and White Papers

Security White Papers and FAQ's related to topics such as enterprise security, business continuity, ransomware, vulnerability management, incident management, security related implementation best practice and more.

Applicable documents by service

Filter this list

Sort by Updated On
Name Salesforce's Approach to Security	Updated On 2025-05-20	Infrastructure First party, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud Tableau Server
Name Salesforce Trusted AI Impact Report	Updated On 2025-05-20	Infrastructure First party, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name FISC Security Guidelines (Japan) - Salesforce Services	Updated On 2025-05-19	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Salesforce Agentforce & Einstein Generative AI Security White Paper (EN)	Updated On 2025-05-12	Infrastructure Hyperforce	Services Agentforce & Einstein Platform Marketing Cloud - Account Engagement
Name Salesforce Security (Incident) Response Plan	Updated On 2025-05-01	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Salesforce Security (Incident) Response Plan (JP)	Updated On 2025-05-01	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name FY25 Stakeholder Impact Report	Updated On 2025-04-15	Infrastructure First party, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud Tableau Server
Name Salesforce Vulnerability Management Program Overview (JP)	Updated On 2025-04-11	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Salesforce Ransomware Mitigation Summary (JP)	Updated On 2025-03-31	Infrastructure First party, AWS, Hyperforce	Services B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud Marketing Cloud - Personalization Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Medical Information System Security Management Guideline (JP)- Hyperforce	Updated On 2025-03-30	Infrastructure Hyperforce	Services Salesforce Services (Hyperforce)
Name Salesforce Services - Security Guide	Updated On 2025-03-28	Infrastructure First party, Hyperforce	Services Data Cloud Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Salesforce Shield Platform Encryption Architecture	Updated On 2025-03-28	Infrastructure First party, Hyperforce	Services Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Salesforce Vulnerability Management Program Overview (EN)	Updated On 2025-03-25	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Salesforce Ransomware Mitigation Summary (EN)	Updated On 2025-03-24	Infrastructure First party, AWS, Hyperforce	Services B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Tableau Cloud on Hyperforce Security White Paper (EN)	Updated On 2025-03-12	Infrastructure Hyperforce	Services Tableau Cloud
Name Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview	Updated On 2025-03-11	Infrastructure First party, AWS	Services B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) MuleSoft Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Information Security Guidelines for CSP - Hyperforce (JP)	Updated On 2025-03-10	Infrastructure Hyperforce	Services B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud Salesforce Services (Hyperforce)
Name Non-functional requirement grades by IPA - Hyperforce (JP)	Updated On 2025-03-10	Infrastructure Hyperforce	Services Salesforce Services (Hyperforce)
Name Salesforce Services on First Party Storage Encryption Summary	Updated On 2025-03-10	Infrastructure First party	Services Salesforce Services (First Party)
Name Salesforce Marketing Cloud Engagement Security White Paper (JP)	Updated On 2025-02-27	Infrastructure First party	Services Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party)
Name Salesforce Marketing Cloud Engagement Security White Paper (EN)	Updated On 2025-02-25	Infrastructure First party	Services Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party)
Name Salesforce Agentforce & Einstein Generative AI Security White Paper (JP)	Updated On 2025-02-17	Infrastructure Hyperforce	Services Agentforce & Einstein Platform
Name Salesforce Data Cloud Security White Paper (JP)	Updated On 2025-01-31	Infrastructure Hyperforce	Services Data Cloud
Name Salesforce Hyperforce Infrastructure and Platform Security White Paper (JP)	Updated On 2025-01-31	Infrastructure Hyperforce	Services B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Salesforce Services (Hyperforce) Tableau Cloud
Name Tableau Cloud - Accessing Your Private Network Data with Data Connect	Updated On 2025-01-22	Infrastructure Hyperforce	Services Tableau Cloud
Name UK’s NCSC 14 Security Cloud Principles	Updated On 2025-01-20	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Tableau Pulse Security Overview	Updated On 2025-01-16	Infrastructure AWS	Services Tableau Cloud
Name MC Personalization Security Defense in Depth Whitepaper	Updated On 2025-01-15	Infrastructure AWS	Services Marketing Cloud - Personalization
Name Salesforce Third Party Risk Management Overview	Updated On 2025-01-02	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Vulnerability Management and Response Plan Summary	Updated On 2025-01-02	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Customer Guide for Incident Notification	Updated On 2024-12-12	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (First Party) Salesforce Services (Hyperforce) Tableau Cloud Tableau Server
Name Hyperforce External IPs	Updated On 2024-12-11	Infrastructure Hyperforce	Services Data Cloud Salesforce Services (Hyperforce)
Name Salesforce Secure Development Lifecycle Overview	Updated On 2024-12-05	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud Tableau Server
Name Salesforce Data Cloud Security White Paper (EN)	Updated On 2024-11-30	Infrastructure Hyperforce	Services Data Cloud
Name Salesforce Hyperforce Infrastructure and Platform Security White Paper (EN)	Updated On 2024-11-30	Infrastructure Hyperforce	Services B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (Hyperforce) Tableau Cloud
Name HECVAT - Marketing Cloud Engagement	Updated On 2024-11-14	Infrastructure First party	Services Marketing Cloud - Engagement (First Party)
Name HECVAT - Salesforce Services	Updated On 2024-11-14	Infrastructure First party	Services Salesforce Services (First Party)
Name Security at Slack	Updated On 2024-11-01	Infrastructure AWS	Services Slack Slack (GovSlack)
Name Non-functional requirement grades by IPA - First Party (JP)	Updated On 2024-10-30	Infrastructure First party	Services Salesforce Services (First Party)
Name Information Security Guidelines for CSP - First Party (Japan)	Updated On 2024-10-03	Infrastructure First party	Services Salesforce Services (First Party)
Name Salesforce Services on Hyperforce Storage Encryption Summary	Updated On 2024-08-23	Infrastructure AWS, Hyperforce	Services Data Cloud Marketing Cloud - Growth Salesforce Government Cloud Plus Salesforce Services (Hyperforce)
Name Indonesia Financial Services user guideline for Salesforce Services	Updated On 2024-08-11	Infrastructure Hyperforce	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name HECVAT - Hyperforce	Updated On 2024-07-02	Infrastructure Hyperforce	Services Salesforce Services (Hyperforce)
Name Flexible Network Egress Allowlisting for Salesforce Orgs	Updated On 2024-06-20	Infrastructure First party	Services Salesforce Services (First Party)
Name Medical Information System Security Management Guideline (JP)	Updated On 2024-05-30	Infrastructure First party	Services Salesforce Services (First Party)
Name Mitigating LLM Risks Across Salesforce’s Gen AI (JP)	Updated On 2024-05-29	Infrastructure AWS, Hyperforce	Services Agentforce & Einstein Platform Data Cloud
Name Mitigating LLM Risks Across Salesforce’s Gen AI	Updated On 2024-05-02	Infrastructure AWS, Hyperforce	Services Agentforce & Einstein Platform Data Cloud
Name US Dept. of Defense Cybersecurity Maturity Model (CMMC) & Salesforce Whitepaper	Updated On 2024-03-14	Infrastructure First party, AWS	Services MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Slack (GovSlack)
Name Singapore Financial Services user guideline for Salesforce Services	Updated On 2024-03-05	Infrastructure Hyperforce	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name FISC Security Guidelines (Japan) - Marketing Cloud	Updated On 2023-08-03	Infrastructure First party	Services Marketing Cloud - Engagement (First Party)
Name Security Perspective on the Shared Responsibility Model	Updated On 2023-07-24	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Salesforce Enterprise Security Overview (JP)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud Tableau Server
Name Account Engagement (fka Pardot) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Services Marketing Cloud - Account Engagement
Name Personalization (fka Interaction Studio) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Services Marketing Cloud - Personalization
Name Security Perspective on the Shared Responsibility Model (JP)	Updated On 2022-08-02	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud
Name Securely Operating the MuleSoft Environment	Updated On 2022-05-25	Infrastructure First party	Services MuleSoft MuleSoft Government Cloud
Name Salesforce Enterprise Security Overview	Updated On 2022-03-11	Infrastructure First party, AWS, Hyperforce	Services Agentforce & Einstein Platform B2C Commerce / Commerce Cloud (First Party) B2C Commerce / Commerce Cloud (Hyperforce) Data Cloud General (not service specific) Heroku Marketing Cloud - Account Engagement Marketing Cloud - Advertising Marketing Cloud - Engagement (First Party) Marketing Cloud - Engagement (Hyperforce) Marketing Cloud - Growth Marketing Cloud - Intelligence Marketing Cloud - Personalization MuleSoft MuleSoft Government Cloud Own by Salesforce Quip Sales Enablement Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Professional Services Salesforce Services (First Party) Salesforce Services (Hyperforce) Slack Slack (GovSlack) Tableau Cloud Tableau Server
Name Salesforce Meeting Belgium Government Security Requirements	Updated On 2022-03-07	Infrastructure First party, Hyperforce	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Computerized System Validation Guideline (JP)	Updated On 2021-12-02	Infrastructure First party	Services
Name Salesforce Security Tips for Guest User Access Controls (JP)	Updated On 2021-09-16	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name Tableau Secure Development	Updated On 2021-09-08	Infrastructure AWS	Services Tableau Cloud Tableau Server
Name Salesforce Security Tips for Guest User Access Controls	Updated On 2021-06-17	Infrastructure First party, AWS, Hyperforce	Services Salesforce Government Cloud Plus Salesforce Government Cloud Plus - Defense Salesforce Services (First Party) Salesforce Services (Hyperforce)
Name NISC Common Standards for Government Agencies (JP)	Updated On 2019-08-08	Infrastructure First party	Services Salesforce Services (First Party) Salesforce Services (Hyperforce)