Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

Marketing Cloud

Applicable to the services branded or sold as (collectively, 'Marketing Cloud'): Advertising Studio (including Advertising Audiences and Social.com), Datorama, ExactTarget (including Email Studio, Journey Builder and Mobile Studio), Interaction Studio (Legacy), Interaction Studio, Marketing Cloud Einstein (formerly branded as Predictive Intelligence), Social Studio, and Evergage.

Applicable documents by category

NameUpdated OnInfrastructureCategory
Vulnerability/Penetration Report Summary - Engagement Web APIs (fka ExactTarget) 2025-02-10 First party External Security Assessments
Salesforce Hyperforce Infrastructure - DR Summary 2025-02-07 Hyperforce Resilience, BCP & DR
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
Salesforce Data Cloud Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
Salesforce Enterprise Resilience/BCP Summary 2025-01-29 First party, AWS, Hyperforce Resilience, BCP & DR
Digital Operational Resilience Act (DORA) Frequently Asked Questions 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
Digital Operational Resilience Act (‘DORA’) Mapping 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
ISO Statement of Applicability (English) 2025-01-28 First party, AWS, Hyperforce ISO 27001
ISO Statement of Applicability (French) 2025-01-28 First party, AWS, Hyperforce ISO 27001
Salesforce Agentforce & Einstein Generative AI Security White Paper (EN) 2025-01-26 Hyperforce FAQ's and White Papers
Spain ENS High - Corporate Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Marketing Cloud Advertising on Hyperforce 2025-01-21 Hyperforce Spain Esquema Nacional de Seguridad (ENS)
MC Personalization Security Defense in Depth Whitepaper 2025-01-15 AWS FAQ's and White Papers
Salesforce Third Party Risk Management Overview 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
HDS Certificate 2024-12-20 First party, AWS, Hyperforce Other Reports and Certificates
ISO/IEC 27001:2022 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27001
ISO/IEC 27017:2015 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27017
ISO/IEC 27018:2019 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27018
NEN 7510-1:2017 Certificate 2024-12-20 First party, AWS, Hyperforce NEN 7510
SOC 2 Report - Advertising Studio on Hyperforce 2024-12-19 Hyperforce SOC 2
SOC 3 Report - Advertising Studio on Hyperforce 2024-12-19 Hyperforce SOC 3
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 1
SOC 2 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 2
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Data Cloud Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
Salesforce Hyperforce Infrastructure and Platform Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
Salesforce Marketing Cloud Engagement Security White Paper (EN) 2024-11-30 First party FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud 2024-11-19 First party, AWS, Hyperforce HIPAA
HECVAT - Marketing Cloud Engagement 2024-11-14 First party FAQ's and White Papers
Vulnerability/Penetration Report Summary - Agentforce 2024-11-13 Hyperforce External Security Assessments
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - MC Intelligence (fka Datorama) 2024-08-27 AWS External Security Assessments
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
Vulnerability/Penetration Report Summary - Account Engagement (fka Pardot) 2024-07-29 AWS External Security Assessments
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
Vulnerability/Penetration Report Summary - Engagement (fka ExactTarget) 2024-07-23 First party External Security Assessments
TX-RAMP - Marketing Cloud Intelligence 2024-07-03 AWS TX-RAMP
Salesforce EU Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce UK Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
SOC 2 Report - MC Intelligence (fka Datorama) 2024-06-24 AWS, Azure SOC 2
SOC 3 Report - MC Intelligence (fka Datorama) 2024-06-24 AWS, Azure SOC 3
TX-RAMP - Marketing Cloud Advertising Studio on Hyperforce 2024-06-20 Hyperforce TX-RAMP
SOC 2 Report - Marketing Cloud Einstein 2024-06-18 AWS SOC 2
SOC 2 Report - Marketing Cloud Engagement on Hyperforce + Marketing Cloud Growth 2024-06-18 Hyperforce SOC 2
SOC 3 Report - Marketing Cloud Einstein 2024-06-18 AWS SOC 3
SOC 3 Report - Marketing Cloud Engagement on Hyperforce + Marketing Cloud Growth 2024-06-18 Hyperforce SOC 3
Vulnerability/Penetration Report Summary - Advertising Studio 2024-06-18 First party External Security Assessments
SOC 2 Report - Personalization (fka Interaction Studio) 2024-06-13 AWS SOC 2
SOC 3 Report - Personalization (fka Interaction Studio) 2024-06-13 AWS SOC 3
SOC 2 Report - Marketing Cloud Einstein on Hyperforce 2024-06-10 Hyperforce SOC 2
SOC 2 Report - Marketing Cloud Engagement (fka ExactTarget) 2024-06-10 First party SOC 2
SOC 2 Report - Social Studio 2024-06-10 First party SOC 2
SOC 3 Report - Marketing Cloud Einstein on Hyperforce 2024-06-10 Hyperforce SOC 3
SOC 3 Report - Marketing Cloud Engagement (fka ExactTarget) 2024-06-10 First party SOC 3
SOC 3 Report - Social Studio 2024-06-10 First party SOC 3
ISO/IEC 27001/27017/27018 Certificate - Misc. Services 2024-04-15 AWS ISO 27001
Vulnerability/Penetration Report Summary - Social Studio 2024-04-15 First party External Security Assessments
Vulnerability/Penetration Report Summary - AI for Marketing (fka MC Einstein) 2024-04-05 AWS External Security Assessments
Marketing Cloud Engagement & MC Einstein IRAP Cloud Security Assessment Letter 2024-03-27 Hyperforce IRAP
HITRUST Certificate - Engagement 2024-03-21 First party HITRUST
IRAP Assessment Report - Marketing Cloud Engagement and MC Einstein [PROTECTED] 2024-03-05 Hyperforce IRAP
Vulnerability/Penetration Report Summary - Audience Studio (fka DMP, fka Krux) 2023-12-21 AWS External Security Assessments
SOC 2 Report - Audience Studio 2023-12-18 AWS SOC 2
SOC 3 Report - Audience Studio 2023-12-18 AWS SOC 3
Vulnerability/Penetration Report Summary - Marketing Cloud Mobile (Andr./iOS) 2023-12-14 First party External Security Assessments
Vulnerability/Penetration Report Summary-Personalization fka Interaction Studio 2023-12-04 AWS, Hyperforce External Security Assessments
Einstein GPT Security White Paper (JP) 2023-09-29 Hyperforce FAQ's and White Papers
FISC Security Guidelines (Japan) - Marketing Cloud 2023-08-03 First party FAQ's and White Papers
Security Perspective on the Shared Responsibility Model 2023-07-24 First party, AWS, Hyperforce FAQ's and White Papers
Data Privacy Framework (DPF) Registration 2023-07-17 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview 2023-06-12 First party, AWS FAQ's and White Papers
CyberGRX Assessment 2023-03-16 First party Other Reports and Certificates
DR Summary - Marketing Cloud Engagement (fka ExactTarget) 2023-02-13 First party Resilience, BCP & DR
CSA CAIQ - Engagement (EN) (fka ExactTarget) 2023-01-17 First party CSA STAR
Salesforce Vulnerability Management Program Overview 2022-12-12 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Enterprise Security Overview (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
Personalization (fka Interaction Studio) Security Overview 2022-08-05 AWS FAQ's and White Papers
Security Perspective on the Shared Responsibility Model (JP) 2022-08-02 First party, AWS, Hyperforce FAQ's and White Papers
TISAX Assessment Results 2022-05-30 First party, AWS, Hyperforce TISAX
Salesforce Enterprise Security Overview 2022-03-11 First party, AWS, Hyperforce FAQ's and White Papers
SOC 1 Bridge (Gap) Letter - Advertising Studio on Hyperforce 2022-01-03 Hyperforce SOC 1
SOC 1 Report - Advertising Studio on Hyperforce 2021-12-01 Hyperforce SOC 1
CSA CAIQ - Interaction Studio (EN) 2021-05-18 AWS CSA STAR
DR Summary - Audience Studio 2020-12-11 AWS Resilience, BCP & DR
DR Summary - Social Studio 2020-10-12 First party Resilience, BCP & DR
DR Summary - Pardot 2020-10-09 AWS Resilience, BCP & DR
DR Summary - MC Intelligence (fka Datorama) 2020-09-09 AWS Resilience, BCP & DR
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
APEC Processor Seal - Salesforce 2020-07-10 First party, Hyperforce APEC Certification for Processors and Controllers