Compliance engineered for the Cloud

Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Marketing Cloud

Applicable to the services branded or sold as (collectively, 'Marketing Cloud'): Advertising Studio (including Advertising Audiences and Social.com), Datorama, ExactTarget (including Email Studio, Journey Builder and Mobile Studio), Interaction Studio (Legacy), Interaction Studio, Marketing Cloud Einstein (formerly branded as Predictive Intelligence), Social Studio, and Evergage.

Some specific certifications and reports may not apply to all services in the above list. Please refer to the "Audits and Certifications" section of the "Salesforce Security, Privacy and Architecture" document for any limitations.

Applicable documents by category

Filter this list

Sort by Updated On
Name Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview	Updated On 2023-05-17	Infrastructure First party, AWS	Category FAQ's and White Papers
Name Vulnerability/Penetration Report Summary - ExactTarget Web APIs	Updated On 2023-05-01	Infrastructure First party	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - Datorama	Updated On 2023-04-28	Infrastructure AWS	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - ExactTarget	Updated On 2023-04-21	Infrastructure First party	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - Marketing Cloud Mobile (Andr./iOS)	Updated On 2023-04-21	Infrastructure First party	Category External Security Assessments
Name Salesforce UK Processor Binding Corporate Rules	Updated On 2023-04-11	Infrastructure First party, AWS, Hyperforce	Category Salesforce BCRs
Name SOC 2 Report - Marketing Cloud Einstein on Hyperforce	Updated On 2023-03-23	Infrastructure Hyperforce	Category SOC 2
Name SOC 3 Report - Marketing Cloud Einstein on Hyperforce	Updated On 2023-03-23	Infrastructure Hyperforce	Category SOC 3
Name Vulnerability/Penetration Report Summary - Audience Studio (fka DMP, fka Krux)	Updated On 2023-03-21	Infrastructure AWS	Category External Security Assessments
Name CyberGRX Assessment	Updated On 2023-03-16	Infrastructure First party	Category CyberGRX
Name Salesforce EU Processor Binding Corporate Rules	Updated On 2023-03-14	Infrastructure First party, AWS, Hyperforce	Category Salesforce BCRs
Name ISO 27001/27017/27018 Certificate - Misc. Services	Updated On 2023-03-09	Infrastructure AWS	Category ISO 27001
Name DR Summary - ExactTarget	Updated On 2023-02-13	Infrastructure First party	Category Disaster Recovery & BCP
Name ISO Statement of Applicability - v3.2 (English)	Updated On 2023-02-07	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ISO Statement of Applicability - V3.2 (French)	Updated On 2023-02-07	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ASIP Santé HDS Certificate	Updated On 2023-02-06	Infrastructure First party, AWS, Hyperforce	Category ASIP Santé HDS
Name ISO 27001:2013 Certificate	Updated On 2023-02-06	Infrastructure First party, AWS, Hyperforce	Category ISO 27001
Name ISO 27017:2015 Certificate	Updated On 2023-02-06	Infrastructure First party, AWS, Hyperforce	Category ISO 27017
Name ISO 27018:2019 Certificate	Updated On 2023-02-06	Infrastructure First party, AWS, Hyperforce	Category ISO 27018
Name NEN 7510-1:2017 Certificate	Updated On 2023-02-06	Infrastructure First party, AWS, Hyperforce	Category NEN 7510
Name CSA CAIQ - ExactTarget (EN)	Updated On 2023-01-17	Infrastructure First party	Category CSA STAR
Name SOC 2 Report - Audience Studio	Updated On 2023-01-03	Infrastructure AWS	Category SOC 2
Name SOC 2 Report - Engagement (formerly ExactTarget) and Advertising Studio	Updated On 2023-01-03	Infrastructure First party	Category SOC 2
Name SOC 3 Report - Audience Studio	Updated On 2023-01-03	Infrastructure AWS	Category SOC 3
Name SOC 3 Report - Engagement (formerly ExactTarget) and Advertising Studio	Updated On 2023-01-03	Infrastructure First party	Category SOC 3
Name HITRUST Certificate - ExactTarget	Updated On 2022-12-22	Infrastructure First party	Category HITRUST
Name Spain Esquema Nacional de Seguridad (ENS) High	Updated On 2022-12-13	Infrastructure First party	Category Spain Esquema Nacional de Seguridad (ENS)
Name Salesforce Vulnerability Management Program Overview	Updated On 2022-12-12	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name SOC 2 Report - Personalization (formerly Interaction Studio)	Updated On 2022-12-07	Infrastructure AWS	Category SOC 2
Name SOC 3 Report - Personalization (formerly Interaction Studio)	Updated On 2022-12-07	Infrastructure AWS	Category SOC 3
Name Vulnerability/Penetration Report Summary-Personalization fka Interaction Studio	Updated On 2022-12-06	Infrastructure AWS, Hyperforce	Category External Security Assessments
Name SOC 1 Report - Corporate Services	Updated On 2022-12-05	Infrastructure First party, AWS, Hyperforce	Category SOC 1
Name SOC 2 Report - Corporate Services	Updated On 2022-12-05	Infrastructure First party, AWS, Hyperforce	Category SOC 2
Name SOC 2 Report - Engagement (formerly ExactTarget) on Hyperforce	Updated On 2022-11-22	Infrastructure Hyperforce	Category SOC 2
Name SOC 3 Report - Engagement (formerly ExactTarget) on Hyperforce	Updated On 2022-11-22	Infrastructure Hyperforce	Category SOC 3
Name SOC 2 Report - Advertising Studio on Hyperforce	Updated On 2022-11-21	Infrastructure Hyperforce	Category SOC 2
Name SOC 3 Report - Advertising Studio on Hyperforce	Updated On 2022-11-21	Infrastructure Hyperforce	Category SOC 3
Name Salesforce Security (Incident) Response Plan	Updated On 2022-11-01	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Enterprise Security Overview (Japanese)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Security (Incident) Response Plan (Japanese)	Updated On 2022-10-04	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Third Party Risk Management Overview	Updated On 2022-09-29	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Vulnerability/Penetration Report Summary - AI for Marketing (fka MC Einstein)	Updated On 2022-09-27	Infrastructure AWS	Category External Security Assessments
Name UK Cyber Essentials Plus Certificate	Updated On 2022-08-08	Infrastructure First party, AWS, Hyperforce	Category UK Cyber Essentials Plus
Name Personalization (formerly Interaction Studio) Security Overview	Updated On 2022-08-05	Infrastructure AWS	Category FAQ's and White Papers
Name Security Perspective on the Shared Responsibility Model (Japanese)	Updated On 2022-08-02	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Vulnerability/Penetration Report Summary - Advertising Studio	Updated On 2022-07-25	Infrastructure First party	Category External Security Assessments
Name FISC Security Guidelines (Japan) - Marketing Cloud	Updated On 2022-07-21	Infrastructure First party	Category FAQ's and White Papers
Name Vulnerability/Penetration Report Summary - Social Studio	Updated On 2022-07-11	Infrastructure First party	Category External Security Assessments
Name Vulnerability/Penetration Report Summary - Pardot	Updated On 2022-06-16	Infrastructure AWS	Category External Security Assessments
Name SOC 2 Report - Datorama	Updated On 2022-06-14	Infrastructure AWS	Category SOC 2
Name SOC 2 Report - Social Studio	Updated On 2022-06-14	Infrastructure First party	Category SOC 2
Name SOC 3 Report - Datorama	Updated On 2022-06-14	Infrastructure AWS	Category SOC 3
Name SOC 3 Report - Social Studio	Updated On 2022-06-14	Infrastructure First party	Category SOC 3
Name SOC 2 Report - Marketing Cloud Einstein	Updated On 2022-06-13	Infrastructure AWS	Category SOC 2
Name SOC 3 Report - Marketing Cloud Einstein	Updated On 2022-06-13	Infrastructure AWS	Category SOC 3
Name TISAX Assessment Results	Updated On 2022-05-30	Infrastructure First party, AWS, Hyperforce	Category TISAX
Name Salesforce Enterprise Security Overview	Updated On 2022-03-11	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Security Perspective on the Shared Responsibility Model	Updated On 2022-03-10	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name SOC 1 Bridge (Gap) Letter - Advertising Studio on Hyperforce	Updated On 2022-01-03	Infrastructure Hyperforce	Category SOC 1
Name SOC 1 Report - Advertising Studio on Hyperforce	Updated On 2021-12-01	Infrastructure Hyperforce	Category SOC 1
Name Vulnerability Management and Response Plan Summary	Updated On 2021-09-27	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name Salesforce Secure Development Lifecycle Overview	Updated On 2021-05-25	Infrastructure First party, AWS, Hyperforce	Category FAQ's and White Papers
Name CSA CAIQ - Interaction Studio (EN)	Updated On 2021-05-18	Infrastructure AWS	Category CSA STAR
Name DR Summary - Audience Studio	Updated On 2020-12-11	Infrastructure AWS	Category Disaster Recovery & BCP
Name BCP Summary	Updated On 2020-12-08	Infrastructure First party, AWS, Hyperforce	Category Disaster Recovery & BCP
Name DR Summary - Social Studio	Updated On 2020-10-12	Infrastructure First party	Category Disaster Recovery & BCP
Name DR Summary - Pardot	Updated On 2020-10-09	Infrastructure AWS	Category Disaster Recovery & BCP
Name DR Summary - Datorama	Updated On 2020-09-09	Infrastructure AWS	Category Disaster Recovery & BCP
Name International Transfers of EU Personal Data to Salesforce's Services FAQ	Updated On 2020-07-16	Infrastructure First party, AWS, Hyperforce	Category Privacy Shield
Name APEC Processor Seal - Salesforce	Updated On 2020-07-10	Infrastructure First party, Hyperforce	Category APEC Certification for Processors and Controllers
Name CSA CAIQ - ExactTarget (JP)	Updated On 2020-01-17	Infrastructure First party	Category CSA STAR
Name [Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2019-11-01	Infrastructure First party, AWS, Hyperforce	Category HIPAA
Name [Video] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud	Updated On 2019-01-16	Infrastructure First party, AWS, Hyperforce	Category HIPAA
Name GDPR - Data Protection Impact Assessments & Salesforce Services	Updated On N/A	Infrastructure First party, AWS, Hyperforce	Category GDPR