Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

FAQ's and White Papers

Security White Papers and FAQ's related to topics such as enterprise security, business continuity, ransomware, vulnerability management, incident management, security related implementation best practice and more.

Applicable documents by service

Filter this list

Sort by Updated On
Name HECVAT - Marketing Cloud Engagement	Updated On 2024-11-14	Infrastructure First party	Services Marketing Cloud
Name HECVAT - Salesforce Services	Updated On 2024-11-14	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name [Whitepaper] Security at Slack	Updated On 2024-11-01	Infrastructure AWS	Services Slack
Name Non-functional requirement grades by IPA (Japan)	Updated On 2024-10-30	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Information Security Guidelines for CSP (Japan)	Updated On 2024-10-03	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Security (Incident) Response Plan	Updated On 2024-09-05	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Salesforce Services Hyperforce Storage Encryption Summary	Updated On 2024-08-23	Infrastructure AWS, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name UK Cloud Security Principles	Updated On 2024-08-13	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Indonesia Financial Services user guideline for Salesforce Services	Updated On 2024-08-11	Infrastructure Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name HECVAT - Hyperforce	Updated On 2024-07-02	Infrastructure Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Flexible Network Egress Allowlisting for Salesforce Orgs	Updated On 2024-06-20	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name [Whitepaper] Tableau Pulse Security Overview	Updated On 2024-06-03	Infrastructure AWS	Services Tableau
Name Medical Information System Security Management Guideline (JP)	Updated On 2024-05-30	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name [Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI (JP)	Updated On 2024-05-29	Infrastructure AWS, Hyperforce	Services Einstein Platform
Name [Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI	Updated On 2024-05-02	Infrastructure AWS, Hyperforce	Services Einstein Platform
Name FISC Security Guidelines (Japan) - Salesforce Services	Updated On 2024-04-26	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name US Dept. of Defense Cybersecurity Maturity Model (CMMC) & Salesforce Whitepaper	Updated On 2024-03-14	Infrastructure First party, AWS	Services MuleSoft Government Cloud Salesforce Government Cloud Plus Slack (GovSlack)
Name Singapore Financial Services user guideline for Salesforce Services	Updated On 2024-03-05	Infrastructure Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Services First Party Storage Encryption Summary	Updated On 2024-02-20	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Secure Development Lifecycle Overview	Updated On 2023-11-01	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Salesforce Data Cloud Security White Paper (JP)	Updated On 2023-10-10	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Marketing Cloud Marketing Cloud - Account Engagement MuleSoft Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Einstein GPT Security White Paper (JP)	Updated On 2023-09-29	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Einstein Platform Marketing Cloud Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Salesforce Hyperforce Infrastructure and Platform Security White Paper	Updated On 2023-09-29	Infrastructure Hyperforce	Services B2B Commerce Customer Data Cloud Einstein Platform Marketing Cloud Salesforce Government Cloud Plus Salesforce Services, Sales Cloud, Service Cloud and Industries
Name FISC Security Guidelines (Japan) - Marketing Cloud	Updated On 2023-08-03	Infrastructure First party	Services Marketing Cloud
Name Einstein GPT Security White Paper (EN)	Updated On 2023-08-01	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Einstein Platform Marketing Cloud Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Salesforce Data Cloud Security White Paper (EN)	Updated On 2023-07-29	Infrastructure Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Marketing Cloud Marketing Cloud - Account Engagement MuleSoft Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Salesforce Third Party Risk Management Overview	Updated On 2023-07-28	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement MuleSoft Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Security Perspective on the Shared Responsibility Model	Updated On 2023-07-24	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview	Updated On 2023-06-12	Infrastructure First party, AWS	Services B2C Commerce / Commerce Cloud Marketing Cloud MuleSoft Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Ransomware Mitigation Summary	Updated On 2023-04-13	Infrastructure First party, AWS, Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Services 21 C.F.R. PART 11 FAQ Overview	Updated On 2023-02-17	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Vulnerability Management Program Overview	Updated On 2022-12-12	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement MuleSoft Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Customer Guide for Incident Notification	Updated On 2022-10-07	Infrastructure First party, AWS	Services Customer Data Cloud Salesforce Government Cloud Plus Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Enterprise Security Overview (JP)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce Marketing Cloud Marketing Cloud - Account Engagement Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Security (Incident) Response Plan (JP)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Account Engagement (fka Pardot) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Services Marketing Cloud - Account Engagement
Name Personalization (fka Interaction Studio) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Services Marketing Cloud
Name Security Perspective on the Shared Responsibility Model (JP)	Updated On 2022-08-02	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Securely Operating the MuleSoft Environment	Updated On 2022-05-25	Infrastructure First party	Services MuleSoft
Name Salesforce Enterprise Security Overview	Updated On 2022-03-11	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce Marketing Cloud Marketing Cloud - Account Engagement Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Meeting Belgium Government Security Requirements	Updated On 2022-03-07	Infrastructure First party, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Computerized System Validation Guideline (JP)	Updated On 2021-12-02	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Vulnerability Management and Response Plan Summary	Updated On 2021-09-27	Infrastructure First party, AWS, Hyperforce	Services Audience Studio and Data Studio B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate Marketing Cloud Marketing Cloud - Account Engagement MuleSoft MuleSoft Government Cloud Salesforce Government Cloud Plus Salesforce Professional Services Salesforce Services, Sales Cloud, Service Cloud and Industries Tableau
Name Salesforce Security Tips for Guest User Access Controls (JP)	Updated On 2021-09-16	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name [Whitepaper] Tableau Secure Development	Updated On 2021-09-08	Infrastructure AWS	Services Tableau
Name Salesforce Services SWIPO Data Portability Transparency Statement	Updated On 2021-07-27	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Salesforce Security Tips for Guest User Access Controls	Updated On 2021-06-17	Infrastructure First party, AWS, Hyperforce	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name Vulnerability Scan Report - Tableau Online	Updated On 2021-03-09	Infrastructure AWS	Services Tableau
Name Security and Compliance Best Practices and FAQ - Work.com	Updated On 2020-07-30	Infrastructure First party, AWS	Services Salesforce Services, Sales Cloud, Service Cloud and Industries
Name NISC Common Standards for Government Agencies (JP)	Updated On 2019-08-08	Infrastructure First party	Services Salesforce Services, Sales Cloud, Service Cloud and Industries