Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

HIPAA

The HIPAA Privacy Rule provides federal protections for personal health information held by covered entities and gives patients an array of rights with respect to that information. Customers who want to build healthcare applications on Salesforce that comply with US HIPAA can contact your account representative regarding a Business Associate Addendum (BAA).

For the current BAA Restrictions and HIPAA Covered Services refer to https://www.salesforce.com/company/legal/business-associate-addendum-restrictions

Applicable documents by service

Filter this list

Sort by Updated On
Name [Whitepaper] Slack and the HIPAA Security Rule	Updated On 2024-12-16	Infrastructure AWS	Services Slack Slack (GovSlack)
Name [Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2024-11-19	Infrastructure First party, AWS, Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku Marketing Cloud MuleSoft Salesforce Government Cloud Plus Salesforce Services, Sales Cloud, Service Cloud and Industries
Name [Whitepaper] Tableau Cloud and the HIPAA Security Rule	Updated On 2022-12-02	Infrastructure AWS	Services Einstein Platform Tableau
Name [Video] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2019-01-16	Infrastructure First party, AWS, Hyperforce	Services B2B Commerce B2C Commerce / Commerce Cloud Customer Data Cloud Einstein Platform Heroku Marketing Cloud MuleSoft Salesforce Government Cloud Plus Salesforce Services, Sales Cloud, Service Cloud and Industries