Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Einstein Platform

Applicable to the services and features branded as Sales Cloud Einstein, Pardot Einstein, Salesforce Inbox, High Velocity Sales, Einstein Engagement Scoring, Einstein Copy Insights, Einstein Vision and Language Services, Einstein Bots, Service Cloud Einstein, Einstein Prediction Builder, Einstein Vision for Social Studio, and the Einstein Features (Activity Capture, Opportunity Scoring, Bots, Case Classification, Article Recommendations, Object Detection, and Prediction Builder).

Applicable documents by category

NameUpdated OnInfrastructureCategory
Salesforce Hyperforce Infrastructure - DR Summary 2025-02-07 Hyperforce Resilience, BCP & DR
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
Salesforce Hyperforce Infrastructure and Platform Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
PCI Attestation of Compliance (AoC) Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
PCI Responsibility Matrix -Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
Salesforce Enterprise Resilience/BCP Summary 2025-01-29 First party, AWS, Hyperforce Resilience, BCP & DR
Digital Operational Resilience Act (DORA) Frequently Asked Questions 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
Digital Operational Resilience Act (‘DORA’) Mapping 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
ISO Statement of Applicability (English) 2025-01-28 First party, AWS, Hyperforce ISO 27001
ISO Statement of Applicability (French) 2025-01-28 First party, AWS, Hyperforce ISO 27001
Salesforce Agentforce & Einstein Generative AI Security White Paper (EN) 2025-01-26 Hyperforce FAQ's and White Papers
Spain ENS High - Corporate Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
SOC 2 Report - Amazon Web Services (AWS) 2025-01-10 AWS, Hyperforce SOC 2
Salesforce Third Party Risk Management Overview 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
HDS Certificate 2024-12-20 First party, AWS, Hyperforce Other Reports and Certificates
ISO/IEC 27001:2022 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27001
ISO/IEC 27017:2015 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27017
ISO/IEC 27018:2019 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27018
NEN 7510-1:2017 Certificate 2024-12-20 First party, AWS, Hyperforce NEN 7510
SOC 2 Report - Activity Platform on Hyperforce 2024-12-19 Hyperforce SOC 2
SOC 3 Report - Activity Platform on Hyperforce 2024-12-19 Hyperforce SOC 3
SOC 1 Report - Salesforce Services 2024-12-17 First party, AWS SOC 1
SOC 2 Report - Salesforce Services 2024-12-17 First party, AWS SOC 2
SOC 3 Report - Salesforce Services 2024-12-17 First party, AWS SOC 3
SOC 1 Report - Amazon Web Services (AWS) 2024-12-13 AWS, Hyperforce SOC 1
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 1
SOC 2 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 2
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
Vulnerability/Penetration Report Summary - OpenAI 2024-11-25 AWS External Security Assessments
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud 2024-11-19 First party, AWS, Hyperforce HIPAA
SOC 2 Report - Einstein Platform and Agentforce on Hyperforce 2024-11-18 Hyperforce SOC 2
SOC 3 Report - Einstein Platform and Agentforce on Hyperforce 2024-11-18 Hyperforce SOC 3
Vulnerability/Penetration Report Summary - Agentforce 2024-11-13 Hyperforce External Security Assessments
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
Vulnerability/Penetration Report Summary - Diffeo 2024-07-03 AWS External Security Assessments
Salesforce EU Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce UK Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Vulnerability/Penetration Report Summary - Sales Cloud Einstein Generative AI 2024-06-28 AWS, Hyperforce External Security Assessments
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
SOC 2 Report - Einstein Relationship Insights 2024-06-10 Hyperforce SOC 2
SOC 3 Report - Einstein Relationship Insights 2024-06-10 Hyperforce SOC 3
[Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI (JP) 2024-05-29 AWS, Hyperforce FAQ's and White Papers
TX-RAMP - Einstein Platform 2024-05-24 AWS TX-RAMP
Vulnerability/Penetration Report Summary - Sales Cloud Einstein 2024-05-10 AWS External Security Assessments
[Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI 2024-05-02 AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - Service Cloud Einstein Generative AI 2024-05-01 AWS External Security Assessments
SOC 2 Report - Einstein Bots 2024-02-22 AWS SOC 2
SOC 3 Report - Einstein Bots 2024-02-22 AWS SOC 3
Vulnerability/Penetration Report Summary - Einstein Vision, Language & Voice 2024-01-30 AWS External Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Inbox Mobile (Andr./iOS) 2024-01-08 First party External Security Assessments
Einstein GPT Security White Paper (JP) 2023-09-29 Hyperforce FAQ's and White Papers
SOC 2 Report - Einstein.AI 2023-08-31 AWS SOC 2
SOC 3 Report - Einstein.AI 2023-08-31 AWS SOC 3
Vulnerability/Penetration Report Summary - Service Cloud Einstein 2023-08-26 AWS External Security Assessments
Data Privacy Framework (DPF) Registration 2023-07-17 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
SOC 2 Report - Einstein Platform 2023-02-06 AWS SOC 2
SOC 3 Report - Einstein Platform 2023-02-06 AWS SOC 3
Salesforce Vulnerability Management Program Overview 2022-12-12 First party, AWS, Hyperforce FAQ's and White Papers
[Whitepaper] Tableau Cloud and the HIPAA Security Rule 2022-12-02 AWS HIPAA
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
APEC Processor Seal - Salesforce 2020-07-10 First party, Hyperforce APEC Certification for Processors and Controllers