Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Customer Data Cloud

Applicable to the services branded as Data Cloud, Customer Data Cloud (aka Salesforce Data Cloud), or Customer Data Platform (formerly branded as Salesforce CDP).

Applicable documents by category

NameUpdated OnInfrastructureCategory
Salesforce Hyperforce Infrastructure - DR Summary 2025-02-07 Hyperforce Resilience, BCP & DR
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
Salesforce Data Cloud Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
PCI Attestation of Compliance (AoC) Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
PCI Responsibility Matrix -Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
Salesforce Enterprise Resilience/BCP Summary 2025-01-29 First party, AWS, Hyperforce Resilience, BCP & DR
Digital Operational Resilience Act (DORA) Frequently Asked Questions 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
Digital Operational Resilience Act (‘DORA’) Mapping 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
ISO Statement of Applicability (English) 2025-01-28 First party, AWS, Hyperforce ISO 27001
ISO Statement of Applicability (French) 2025-01-28 First party, AWS, Hyperforce ISO 27001
Salesforce Agentforce & Einstein Generative AI Security White Paper (EN) 2025-01-26 Hyperforce FAQ's and White Papers
PCI ASV Network Scan - Hyperforce EMEA (EU Central 2, Zurich, Switzerland 2025-01-21 Hyperforce PCI DSS
Spain ENS High - Corporate Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
SOC 2 Report - Amazon Web Services (AWS) 2025-01-10 AWS, Hyperforce SOC 2
SOC 1 Bridge (Gap) Letter - Salesforce Data Cloud 2025-01-06 Hyperforce SOC 1
Salesforce Third Party Risk Management Overview 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
C5 (ISAE 3000) Report - Data Cloud 2024-12-20 Hyperforce C5 (ISAE 3000)
HDS Certificate 2024-12-20 First party, AWS, Hyperforce Other Reports and Certificates
ISO/IEC 27001:2022 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27001
ISO/IEC 27017:2015 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27017
ISO/IEC 27018:2019 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27018
SOC 1 Report - Amazon Web Services (AWS) 2024-12-13 AWS, Hyperforce SOC 1
SOC 1 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce SOC 1
SOC 2 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce SOC 2
SOC 3 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce SOC 3
Customer Guide for Incident Notification 2024-12-12 First party, AWS, Hyperforce FAQ's and White Papers
PCI ASV Network Scan - Hyperforce AMER (US West 2) N.California 2024-12-10 Hyperforce PCI DSS
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 1
SOC 2 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 2
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Data Cloud Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
Salesforce Marketing Cloud Engagement Security White Paper (EN) 2024-11-30 First party FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
Vulnerability/Penetration Report Summary - OpenAI 2024-11-25 AWS External Security Assessments
PCI ASV Network Scan - Hyperforce EMEA (EU West 2) UK 2024-11-20 Hyperforce PCI DSS
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud 2024-11-19 First party, AWS, Hyperforce HIPAA
Vulnerability/Penetration Report Summary - Agentforce 2024-11-13 Hyperforce External Security Assessments
PCI ASV Network Scan - Hyperforce APAC (North East 1) Tokyo, Japan 2024-10-29 Hyperforce PCI DSS
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
HITRUST Certificate - Customer Data Cloud 2024-08-07 AWS HITRUST
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
PCI ASV Network Scan - Hyperforce AMER (US East 1) N.Virginia 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce AMER (US East 2) Ohio 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (North East 2) Seoul, South Korea 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (South 1) Mumbai, India 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (South East 1) Singapore) 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (South East 2) Sydney, Australia 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce APAC (South East 3) Indonesia 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce Canada (CA Central 1) Canada 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU Central 1) Germany 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU North 1) Sweden 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce EMEA (EU West 3) France 2024-07-12 Hyperforce PCI DSS
PCI ASV Network Scan - Hyperforce LACA (SA East 1) Brazil 2024-07-12 Hyperforce PCI DSS
Spain ENS High - Data Cloud 2024-06-27 Hyperforce Spain Esquema Nacional de Seguridad (ENS)
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
TX-RAMP - Data Cloud 2024-06-20 AWS TX-RAMP
Data Cloud IRAP Cloud Security Assessment Letter 2024-03-27 Hyperforce IRAP
IRAP Assessment Report - Salesforce Data Cloud [PROTECTED] 2024-03-14 Hyperforce IRAP
Vulnerability/Penetration Report Summary - Salesforce Data Cloud (fka CDP) 2024-01-05 Hyperforce External Security Assessments
Security Perspective on the Shared Responsibility Model 2023-07-24 First party, AWS, Hyperforce FAQ's and White Papers
APEC Controller Certification - Salesforce 2023-03-07 First party, Hyperforce APEC Certification for Processors and Controllers
Salesforce Vulnerability Management Program Overview 2022-12-12 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
Security Perspective on the Shared Responsibility Model (JP) 2022-08-02 First party, AWS, Hyperforce FAQ's and White Papers
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
APEC Processor Seal - Salesforce 2020-07-10 First party, Hyperforce APEC Certification for Processors and Controllers