Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Heroku

Applicable to the services branded as Heroku.

Please refer to the "Audits and Certifications" section of the service-specific Security, Privacy and Architecture documentation for details regarding the security and privacy related audits and certifications received.

Applicable documents by category

Filter this list

Sort by Updated On
Name Salesforce Enterprise Resilience/BCP Summary	Updated On 2025-01-29	Infrastructure First party, AWS, Hyperforce	Category Resilience, BCP & DR
Name Digital Operational Resilience Act (DORA) Frequently Asked Questions	Updated On 2025-01-28	Infrastructure First party, AWS, Hyperforce	Category Digital Operational Resilience Act (DORA)
Name Digital Operational Resilience Act (‘DORA’) Mapping	Updated On 2025-01-28	Infrastructure First party, AWS, Hyperforce	Category Digital Operational Resilience Act (DORA)
Name ISO Statement of Applicability (English)	Updated On 2025-01-28	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ISO Statement of Applicability (French)	Updated On 2025-01-28	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name Spain ENS High - Corporate Services	Updated On 2025-01-21	Infrastructure First party	Category Spain Esquema Nacional de Seguridad (ENS)
Name Vulnerability/Penetration Report Summary - Heroku	Updated On 2025-01-21	Infrastructure AWS	Category External Security Assessments
Name SOC 2 Report - Amazon Web Services (AWS)	Updated On 2025-01-10	Infrastructure AWS, Hyperforce	Category SOC 2
Name SOC 1 Bridge (Gap) Letter - Heroku	Updated On 2025-01-06	Infrastructure AWS	Category SOC 1
Name Salesforce Third Party Risk Management Overview	Updated On 2025-01-02	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Vulnerability Management and Response Plan Summary	Updated On 2025-01-02	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name HDS Certificate	Updated On 2024-12-20	Infrastructure First party, AWS, Hyperforce	Category HDS
Name ISO/IEC 27001:2022 Certificate	Updated On 2024-12-20	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ISO/IEC 27017:2015 Certificate	Updated On 2024-12-20	Infrastructure First party, AWS, Hyperforce	Category ISO 27017
Name ISO/IEC 27018:2019 Certificate	Updated On 2024-12-20	Infrastructure First party, AWS, Hyperforce	Category ISO 27018
Name NEN 7510-1:2017 Certificate	Updated On 2024-12-20	Infrastructure First party, AWS, Hyperforce	Category NEN 7510
Name SOC 1 Report - Heroku	Updated On 2024-12-19	Infrastructure AWS	Category SOC 1
Name SOC 2 Report - Heroku	Updated On 2024-12-19	Infrastructure AWS	Category SOC 2
Name SOC 3 Report - Heroku	Updated On 2024-12-19	Infrastructure AWS	Category SOC 3
Name SOC 1 Report - Amazon Web Services (AWS)	Updated On 2024-12-13	Infrastructure AWS, Hyperforce	Category SOC 1
Name SOC 1 Report - Corporate Services	Updated On 2024-12-09	Infrastructure First party, AWS, Hyperforce	Category SOC 1
Name SOC 2 Report - Corporate Services	Updated On 2024-12-09	Infrastructure First party, AWS, Hyperforce	Category SOC 2
Name Salesforce Secure Development Lifecycle Overview	Updated On 2024-12-05	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name SOC 2 Report - OpenAI	Updated On 2024-11-25	Infrastructure AWS, Hyperforce	Category SOC 2
Name Vulnerability/Penetration Report Summary - OpenAI	Updated On 2024-11-25	Infrastructure AWS	Category External Security Assessments
Name [Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2024-11-19	Infrastructure First party, AWS, Hyperforce	Category HIPAA
Name Salesforce Security (Incident) Response Plan	Updated On 2024-09-05	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name GDPR - Data Protection Impact Assessments & Salesforce Services	Updated On 2024-08-14	Infrastructure First party, AWS, Hyperforce	Category GDPR
Name DR/BCP Summary - Heroku Services	Updated On 2024-07-31	Infrastructure AWS	Category Resilience, BCP & DR
Name PCI Attestation of Compliance (AoC) - Heroku	Updated On 2024-07-26	Infrastructure AWS	Category PCI DSS
Name PCI Responsibility Matrix - Heroku	Updated On 2024-07-26	Infrastructure AWS	Category PCI DSS
Name UK Cyber Essentials Plus Certificate	Updated On 2024-07-24	Infrastructure First party, AWS, Hyperforce	Category UK Cyber Essentials Plus
Name Salesforce EU Processor Binding Corporate Rules	Updated On 2024-07-01	Infrastructure First party, AWS, Hyperforce	Category Salesforce BCRs
Name Salesforce UK Processor Binding Corporate Rules	Updated On 2024-07-01	Infrastructure First party, AWS, Hyperforce	Category Salesforce BCRs
Name Salesforce Health & Safety Policy	Updated On 2024-06-26	Infrastructure First party, AWS, Hyperforce, Azure, GCP	Category Resilience, BCP & DR
Name TX-RAMP - Heroku	Updated On 2024-06-20	Infrastructure AWS	Category TX-RAMP
Name PCI ASV Network Scan - Heroku	Updated On 2023-09-08	Infrastructure AWS	Category PCI DSS
Name Data Privacy Framework (DPF) Registration	Updated On 2023-07-17	Infrastructure First party, AWS, Hyperforce	Category U.S. Data Privacy Framework (DPF)
Name ISMAP Cloud Service List - Heroku	Updated On 2023-06-16	Infrastructure AWS	Category ISMAP
Name Salesforce Vulnerability Management Program Overview	Updated On 2022-12-12	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Security (Incident) Response Plan (JP)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name CSA CAIQ - Heroku	Updated On 2022-02-03	Infrastructure AWS	Category CSA STAR
Name International Transfers of EU Personal Data to Salesforce's Services FAQ	Updated On 2020-07-16	Infrastructure First party, AWS, Hyperforce	Category U.S. Data Privacy Framework (DPF)
Name APEC Processor Seal - Salesforce	Updated On 2020-07-10	Infrastructure First party, Hyperforce	Category APEC Certification for Processors and Controllers