Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Agentforce & Einstein Platform

Applicable to the services and features branded as: Agentforce (collectively, “Agentforce”) which includes the following features: Agentforce Assistant, Agentforce Sales Coach, Agentforce SDR, Agentforce Service Agent. Einstein Bots Einstein Copy Insights Einstein Conversation Insights Einstein for Platform, which includes the following features: Agentforce Assistant, Prompt Builder, Einstein for Formulas, Field Generation, Einstein for Flow Einstein for Sales , which includes the following features: Agentforce Assistant, Prompt Builder, Einstein for Formulas, Field Generation, Einstein GPT for Sales, Sales Cloud Einstein, Contracts AI, Transaction Disputes, Automatic Contact Enhancements

Applicable documents by category

NameUpdated OnInfrastructureCategory
SOC 1 Report - Amazon Web Services (AWS) 2025-04-25 AWS, Hyperforce SOC 1
Salesforce Vulnerability Management Program Overview (JP) 2025-04-11 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Enterprise Resilience/BCP Summary 2025-04-01 First party, AWS, Hyperforce Resilience, BCP & DR
Vulnerability/Penetration Report Summary - Service Cloud Einstein 2025-03-31 AWS External Security Assessments
Salesforce Vulnerability Management Program Overview (EN) 2025-03-25 First party, AWS, Hyperforce FAQ's and White Papers
SOC 2 Report - Einstein Platform and Agentforce on Hyperforce 2025-03-21 Hyperforce SOC 2
SOC 3 Report - Einstein Platform and Agentforce on Hyperforce 2025-03-21 Hyperforce SOC 3
Salesforce Hyperforce Infrastructure - DR Summary 2025-02-07 Hyperforce Resilience, BCP & DR
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
Salesforce Hyperforce Infrastructure and Platform Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
PCI Attestation of Compliance (AoC) Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
PCI Responsibility Matrix -Data Cloud, Einstein Platform and Agentforce 2025-01-30 Hyperforce PCI DSS
Digital Operational Resilience Act (DORA) Frequently Asked Questions 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
Digital Operational Resilience Act (‘DORA’) Mapping 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
ISO Statement of Applicability (English) 2025-01-28 First party, AWS, Hyperforce ISO 27001
ISO Statement of Applicability (French) 2025-01-28 First party, AWS, Hyperforce ISO 27001
Salesforce Agentforce & Einstein Generative AI Security White Paper (EN) 2025-01-26 Hyperforce FAQ's and White Papers
Spain ENS High - Corporate Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
SOC 2 Report - Amazon Web Services (AWS) 2025-01-10 AWS, Hyperforce SOC 2
Salesforce Third Party Risk Management Overview 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
HDS Certificate 2024-12-20 First party, AWS, Hyperforce Other Reports and Certificates
ISO/IEC 27001:2022 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27001
ISO/IEC 27017:2015 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27017
ISO/IEC 27018:2019 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27018
NEN 7510-1:2017 Certificate 2024-12-20 First party, AWS, Hyperforce NEN 7510
SOC 2 Report - Activity Platform on Hyperforce 2024-12-19 Hyperforce SOC 2
SOC 3 Report - Activity Platform on Hyperforce 2024-12-19 Hyperforce SOC 3
SOC 1 Report - Salesforce Services on First Party 2024-12-17 First party, AWS SOC 1
SOC 2 Report - Salesforce Services on First Party 2024-12-17 First party, AWS SOC 2
SOC 3 Report - Salesforce Services on First Party 2024-12-17 First party, AWS SOC 3
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 1
SOC 2 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 2
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
Vulnerability/Penetration Report Summary - OpenAI 2024-11-25 AWS External Security Assessments
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud 2024-11-19 First party, AWS, Hyperforce HIPAA
Vulnerability/Penetration Report Summary - Agentforce 2024-11-13 Hyperforce External Security Assessments
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
Vulnerability/Penetration Report Summary - Diffeo 2024-07-03 AWS External Security Assessments
Salesforce EU Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce UK Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Vulnerability/Penetration Report Summary - Sales Cloud Einstein Generative AI 2024-06-28 AWS, Hyperforce External Security Assessments
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
SOC 2 Report - Einstein Relationship Insights 2024-06-10 Hyperforce SOC 2
SOC 3 Report - Einstein Relationship Insights 2024-06-10 Hyperforce SOC 3
[Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI (JP) 2024-05-29 AWS, Hyperforce FAQ's and White Papers
TX-RAMP - Einstein Platform 2024-05-24 AWS TX-RAMP
Vulnerability/Penetration Report Summary - Sales Cloud Einstein 2024-05-10 AWS External Security Assessments
[Whitepaper] Mitigating LLM Risks Across Salesforce’s Gen AI 2024-05-02 AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - Service Cloud Einstein Generative AI 2024-05-01 AWS External Security Assessments
SOC 2 Report - Einstein Bots 2024-02-22 AWS SOC 2
SOC 3 Report - Einstein Bots 2024-02-22 AWS SOC 3
Vulnerability/Penetration Report Summary - Einstein Vision, Language & Voice 2024-01-30 AWS External Security Assessments
Vulnerability/Penetration Report Summary - Salesforce Inbox Mobile (Andr./iOS) 2024-01-08 First party External Security Assessments
Einstein GPT Security White Paper (JP) 2023-09-29 Hyperforce FAQ's and White Papers
SOC 2 Report - Einstein.AI 2023-08-31 AWS SOC 2
SOC 3 Report - Einstein.AI 2023-08-31 AWS SOC 3
Data Privacy Framework (DPF) Registration 2023-07-17 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
SOC 2 Report - Einstein Platform 2023-02-06 AWS SOC 2
SOC 3 Report - Einstein Platform 2023-02-06 AWS SOC 3
[Whitepaper] Tableau Cloud and the HIPAA Security Rule 2022-12-02 AWS HIPAA
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
APEC Processor Seal - Salesforce 2020-07-10 First party, Hyperforce APEC Certification for Processors and Controllers