Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Marketing Cloud

Applicable to the services branded or sold as (collectively, 'Marketing Cloud'): Advertising Studio (including Advertising Audiences and Social.com), Datorama, ExactTarget (including Email Studio, Journey Builder and Mobile Studio), Interaction Studio (Legacy), Interaction Studio, Marketing Cloud Einstein (formerly branded as Predictive Intelligence), Social Studio, and Evergage.

Some specific certifications and reports may not apply to all services in the above list. Please refer to the "Audits and Certifications" section of the "Salesforce Security, Privacy and Architecture" document for any limitations.

Applicable documents by category

Filter this list

Sort by Updated On
Name ISO 27001/27017/27018 Certificate - Misc. Services	Updated On 2024-04-15	Infrastructure AWS	Category ISO 27001
Name Vulnerability/Penetration Report Summary - Social Studio	Updated On 2024-04-15	Infrastructure First party	Category External Security Assessments
Name TX-RAMP - Salesforce Marketing Cloud Engagement (fka ExactTarget)	Updated On 2024-04-05	Infrastructure First party	Category TX-RAMP
Name Vulnerability/Penetration Report Summary - AI for Marketing (fka MC Einstein)	Updated On 2024-04-05	Infrastructure AWS	Category External Security Assessments
Name Salesforce EU Processor Binding Corporate Rules	Updated On 2024-04-02	Infrastructure First party, AWS, Hyperforce	Category Salesforce BCRs
Name Salesforce UK Processor Binding Corporate Rules	Updated On 2024-04-02	Infrastructure First party, AWS, Hyperforce	Category Salesforce BCRs
Name Marketing Cloud Engagement & MC Einstein IRAP Cloud Security Assessment Letter	Updated On 2024-03-27	Infrastructure Hyperforce	Category IRAP
Name HITRUST Certificate - Engagement	Updated On 2024-03-21	Infrastructure First party	Category HITRUST
Name IRAP Assessment Report - Marketing Cloud Engagement and MC Einstein [PROTECTED]	Updated On 2024-03-05	Infrastructure Hyperforce	Category IRAP
Name ISO Statement of Applicability - v3.4 (EN)	Updated On 2024-02-15	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ISO Statement of Applicability - V3.4 (FR)	Updated On 2024-02-15	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name NEN 7510-1:2017 Certificate	Updated On 2024-01-29	Infrastructure First party, AWS, Hyperforce	Category NEN 7510
Name HDS Certificate	Updated On 2024-01-26	Infrastructure First party, AWS, Hyperforce	Category HDS
Name ISO 27001:2013 Certificate	Updated On 2024-01-26	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ISO 27017:2015 Certificate	Updated On 2024-01-26	Infrastructure First party, AWS, Hyperforce	Category ISO 27017
Name ISO 27018:2019 Certificate	Updated On 2024-01-26	Infrastructure First party, AWS, Hyperforce	Category ISO 27018
Name Vulnerability/Penetration Report Summary - Datorama	Updated On 2024-01-04	Infrastructure AWS	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - Audience Studio (fka DMP, fka Krux)	Updated On 2023-12-21	Infrastructure AWS	Category External Security Assessments
Name SOC 2 Report - Engagement (fka ExactTarget)	Updated On 2023-12-20	Infrastructure First party	Category SOC 2
Name SOC 3 Report - Engagement (fka ExactTarget)	Updated On 2023-12-20	Infrastructure First party	Category SOC 3
Name SOC 2 Report - Audience Studio	Updated On 2023-12-18	Infrastructure AWS	Category SOC 2
Name SOC 3 Report - Audience Studio	Updated On 2023-12-18	Infrastructure AWS	Category SOC 3
Name SOC 1 Report - Corporate Services	Updated On 2023-12-15	Infrastructure First party, AWS, Hyperforce	Category SOC 1
Name SOC 2 Report - Corporate Services	Updated On 2023-12-15	Infrastructure First party, AWS, Hyperforce	Category SOC 2
Name Vulnerability/Penetration Report Summary - ExactTarget Web APIs	Updated On 2023-12-14	Infrastructure First party	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - Marketing Cloud Mobile (Andr./iOS)	Updated On 2023-12-14	Infrastructure First party	Category External Security Assessments
Name Vulnerability/Penetration Report Summary-Personalization fka Interaction Studio	Updated On 2023-12-04	Infrastructure AWS, Hyperforce	Category External Security Assessments
Name SOC 1 Report - Salesforce Data Cloud (fka CDP)	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 1
Name SOC 2 Report - Advertising Studio on Hyperforce	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 2
Name SOC 2 Report - Engagement (fka ExactTarget) on Hyperforce	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 2
Name SOC 2 Report - Salesforce Data Cloud (fka CDP)	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 2
Name SOC 3 Report - Advertising Studio on Hyperforce	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 3
Name SOC 3 Report - Engagement (fka ExactTarget) on Hyperforce	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 3
Name SOC 3 Report - Salesforce Data Cloud (fka CDP)	Updated On 2023-11-27	Infrastructure Hyperforce	Category SOC 3
Name TX-RAMP - Salesforce Marketing Cloud	Updated On 2023-11-17	Infrastructure First party, AWS, Hyperforce	Category TX-RAMP
Name Salesforce Secure Development Lifecycle Overview	Updated On 2023-11-01	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Data Cloud Security White Paper (JP)	Updated On 2023-10-10	Infrastructure Hyperforce	Category FAQ's and White Papers
Name Einstein GPT Security White Paper (JP)	Updated On 2023-09-29	Infrastructure Hyperforce	Category FAQ's and White Papers
Name Salesforce Hyperforce Infrastructure and Platform Security White Paper	Updated On 2023-09-29	Infrastructure Hyperforce	Category FAQ's and White Papers
Name Vulnerability/Penetration Report Summary - ExactTarget	Updated On 2023-09-27	Infrastructure First party	Category External Security Assessments
Name Spain ENS High - Corporate Services	Updated On 2023-09-15	Infrastructure First party	Category Spain Esquema Nacional de Seguridad (ENS)
Name Spain ENS High - Marketing Cloud Advertising on Hyperforce	Updated On 2023-09-15	Infrastructure Hyperforce	Category Spain Esquema Nacional de Seguridad (ENS)
Name FISC Security Guidelines (Japan) - Marketing Cloud	Updated On 2023-08-03	Infrastructure First party	Category FAQ's and White Papers
Name Einstein GPT Security White Paper (EN)	Updated On 2023-08-01	Infrastructure Hyperforce	Category FAQ's and White Papers
Name Salesforce Data Cloud Security White Paper (EN)	Updated On 2023-07-29	Infrastructure Hyperforce	Category FAQ's and White Papers
Name Salesforce Third Party Risk Management Overview	Updated On 2023-07-28	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Security Perspective on the Shared Responsibility Model	Updated On 2023-07-24	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name SOC 2 Report - Marketing Cloud Einstein on Hyperforce	Updated On 2023-07-21	Infrastructure Hyperforce	Category SOC 2
Name SOC 3 Report - Marketing Cloud Einstein on Hyperforce	Updated On 2023-07-21	Infrastructure Hyperforce	Category SOC 3
Name UK Cyber Essentials Plus Certificate	Updated On 2023-07-21	Infrastructure First party, AWS, Hyperforce	Category UK Cyber Essentials Plus
Name Data Privacy Framework (DPF) Registration	Updated On 2023-07-17	Infrastructure First party, AWS, Hyperforce	Category U.S. Data Privacy Framework (DPF)
Name SOC 2 Report - Intelligence (fka Datorama)	Updated On 2023-06-21	Infrastructure AWS, Azure	Category SOC 2
Name SOC 2 Report - Marketing Cloud Einstein	Updated On 2023-06-21	Infrastructure AWS	Category SOC 2
Name SOC 2 Report - Personalization (fka Interaction Studio)	Updated On 2023-06-21	Infrastructure AWS	Category SOC 2
Name SOC 3 Report - Intelligence (fka Datorama)	Updated On 2023-06-21	Infrastructure AWS, Azure	Category SOC 3
Name SOC 3 Report - Marketing Cloud Einstein	Updated On 2023-06-21	Infrastructure AWS	Category SOC 3
Name SOC 3 Report - Personalization (fka Interaction Studio)	Updated On 2023-06-21	Infrastructure AWS	Category SOC 3
Name Vulnerability/Penetration Report Summary - Advertising Studio	Updated On 2023-06-16	Infrastructure First party	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - Pardot	Updated On 2023-06-15	Infrastructure AWS	Category External Security Assessments
Name Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview	Updated On 2023-06-12	Infrastructure First party, AWS	Category FAQ's and White Papers
Name SOC 2 Report - Social Studio	Updated On 2023-06-09	Infrastructure First party	Category SOC 2
Name SOC 3 Report - Social Studio	Updated On 2023-06-09	Infrastructure First party	Category SOC 3
Name CyberGRX Assessment	Updated On 2023-03-16	Infrastructure First party	Category CyberGRX
Name DR Summary - ExactTarget	Updated On 2023-02-13	Infrastructure First party	Category Disaster Recovery & BCP
Name CSA CAIQ - ExactTarget (EN)	Updated On 2023-01-17	Infrastructure First party	Category CSA STAR
Name Salesforce Vulnerability Management Program Overview	Updated On 2022-12-12	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Security (Incident) Response Plan	Updated On 2022-11-01	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Enterprise Security Overview (JP)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Security (Incident) Response Plan (JP)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Personalization (fka Interaction Studio) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Category FAQ's and White Papers
Name Security Perspective on the Shared Responsibility Model (JP)	Updated On 2022-08-02	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name TISAX Assessment Results	Updated On 2022-05-30	Infrastructure First party, AWS, Hyperforce	Category TISAX
Name Salesforce Enterprise Security Overview	Updated On 2022-03-11	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name SOC 1 Bridge (Gap) Letter - Advertising Studio on Hyperforce	Updated On 2022-01-03	Infrastructure Hyperforce	Category SOC 1
Name SOC 1 Report - Advertising Studio on Hyperforce	Updated On 2021-12-01	Infrastructure Hyperforce	Category SOC 1
Name Vulnerability Management and Response Plan Summary	Updated On 2021-09-27	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name CSA CAIQ - Interaction Studio (EN)	Updated On 2021-05-18	Infrastructure AWS	Category CSA STAR
Name DR Summary - Audience Studio	Updated On 2020-12-11	Infrastructure AWS	Category Disaster Recovery & BCP
Name BCP Summary	Updated On 2020-12-08	Infrastructure First party, AWS, Hyperforce	Category Disaster Recovery & BCP
Name DR Summary - Social Studio	Updated On 2020-10-12	Infrastructure First party	Category Disaster Recovery & BCP
Name DR Summary - Pardot	Updated On 2020-10-09	Infrastructure AWS	Category Disaster Recovery & BCP
Name DR Summary - Datorama	Updated On 2020-09-09	Infrastructure AWS	Category Disaster Recovery & BCP
Name International Transfers of EU Personal Data to Salesforce's Services FAQ	Updated On 2020-07-16	Infrastructure First party, AWS, Hyperforce	Category U.S. Data Privacy Framework (DPF)
Name APEC Processor Seal - Salesforce	Updated On 2020-07-10	Infrastructure First party, Hyperforce	Category APEC Certification for Processors and Controllers
Name CSA CAIQ - ExactTarget (JP)	Updated On 2020-01-17	Infrastructure First party	Category CSA STAR
Name [Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2019-11-01	Infrastructure First party, AWS, Hyperforce	Category HIPAA
Name [Video] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2019-01-16	Infrastructure First party, AWS, Hyperforce	Category HIPAA
Name GDPR - Data Protection Impact Assessments & Salesforce Services	Updated On N/A	Infrastructure First party, AWS, Hyperforce	Category GDPR