Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

IRAP

The Infosec Registered Assessors Program (IRAP) provides a comprehensive process for the assessment of systems security against the security controls provided by the Australian Government Information Security Manual (ISM). The ISM, along with the IRAP program, are governed by the Australian Cyber Security Centre (ACSC), which forms part of the Australian Signals Directorate (ASD). 


The ISM describes the security control mechanisms that cloud services providers require for providing services to the government. IRAP assessments involve independent ACSC endorsed IRAP assessors evaluating the implementation, appropriateness and effectiveness of a system’s security controls. The IRAP assessment outcomes are documented within IRAP security assessment reports. Government customers use these reports to evaluate the security of cloud services/systems, any associated risks; before authorizing a system’s suitability for usage inline with their risk appetite and specific security requirements.


Please note some of the reports below require a password to be opened. Customers are requested to contact their Salesforce Account team to request for the password to access these reports.

Applicable documents by service

NameUpdated OnInfrastructureServices
ACSC Essential 8 report for Salesforce Services and Data Cloud on Hyperforce AU 2024-10-29 Hyperforce Salesforce Services, Sales Cloud, Service Cloud and Industries
IRAP Assessment Report - Slack 2024-10-09 AWS Slack
IRAP Engagement letter - Slack 2024-10-09 AWS Slack
IRAP Assessment Report - Salesforce Services on Hyperforce AU [PROTECTED] 2024-08-05 Hyperforce Salesforce Services, Sales Cloud, Service Cloud and Industries
Mulesoft IRAP Assessment letter 2024-07-11 AWS MuleSoft
IRAP Assessment Report - Mulesoft 2024-07-02 AWS MuleSoft
IRAP Assessment Report - Salesforce Services on Japan DC 2024-05-13 First party Salesforce Services, Sales Cloud, Service Cloud and Industries
Data Cloud IRAP Cloud Security Assessment Letter 2024-03-27 Hyperforce Customer Data Cloud
Marketing Cloud Engagement & MC Einstein IRAP Cloud Security Assessment Letter 2024-03-27 Hyperforce Marketing Cloud
IRAP Assessment Report - Salesforce Data Cloud [PROTECTED] 2024-03-14 Hyperforce Customer Data Cloud
IRAP Assessment Report - Marketing Cloud Engagement and MC Einstein [PROTECTED] 2024-03-05 Hyperforce Marketing Cloud
Mulesoft ACSC Essential Eight Maturity report 2023-08-31 AWS MuleSoft
ACSC Essential Eight Maturity Report - Salesforce Services on AWS and Japan DC 2023-07-30 First party, AWS Salesforce Services, Sales Cloud, Service Cloud and Industries
Salesforce Services AWS and Japan DC IRAP Addendum Letter March 2023 2023-06-21 First party, AWS Salesforce Services, Sales Cloud, Service Cloud and Industries
Mulesoft IRAP Addendum Letter June 2022 2022-11-10 AWS MuleSoft
IRAP Engagement Letter - Salesforce Services on AWS and Japan DC 2022-08-17 First party, AWS Salesforce Services, Sales Cloud, Service Cloud and Industries
Salesforce Services IRAP Customer Configuration Guide [PROTECTED] 2022-06-05 Hyperforce Salesforce Services, Sales Cloud, Service Cloud and Industries
IRAP Engagement letter - Salesforce Services on Hyperforce AU [PROTECTED] 2021-11-09 Hyperforce Salesforce Services, Sales Cloud, Service Cloud and Industries
IRAP Customer Configuration User Guide Health Check [Official] 2020-08-04 First party, AWS Salesforce Services, Sales Cloud, Service Cloud and Industries
IRAP Customer Configuration User Guide [Official] 2020-08-04 First party, AWS Salesforce Services, Sales Cloud, Service Cloud and Industries