Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

MuleSoft

Applicable to the services branded as MuleSoft or the Anypoint Platform (MuleSoft Services).

Applicable documents by category

NameUpdated OnInfrastructureCategory
Salesforce Hyperforce Infrastructure - DR Summary 2025-02-07 Hyperforce Resilience, BCP & DR
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
Salesforce Data Cloud Security White Paper (JP) 2025-01-31 Hyperforce FAQ's and White Papers
Salesforce Enterprise Resilience/BCP Summary 2025-01-29 First party, AWS, Hyperforce Resilience, BCP & DR
Digital Operational Resilience Act (DORA) Frequently Asked Questions 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
Digital Operational Resilience Act (‘DORA’) Mapping 2025-01-28 First party, AWS, Hyperforce Digital Operational Resilience Act (DORA)
ISO Statement of Applicability (English) 2025-01-28 First party, AWS, Hyperforce ISO 27001
ISO Statement of Applicability (French) 2025-01-28 First party, AWS, Hyperforce ISO 27001
Spain ENS High - Corporate Services 2025-01-21 First party Spain Esquema Nacional de Seguridad (ENS)
Spain ENS High - Mulesoft 2025-01-21 AWS Spain Esquema Nacional de Seguridad (ENS)
SOC 2 Report - Amazon Web Services (AWS) 2025-01-10 AWS, Hyperforce SOC 2
SOC 1 Bridge (Gap) Letter - MuleSoft 2025-01-06 AWS SOC 1
SOC 1 Bridge (Gap) Letter - MuleSoft on Hyperforce 2025-01-06 Hyperforce SOC 1
Salesforce Third Party Risk Management Overview 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
HDS Certificate 2024-12-20 First party, AWS, Hyperforce Other Reports and Certificates
ISO/IEC 27001:2022 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27001
ISO/IEC 27017:2015 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27017
ISO/IEC 27018:2019 Certificate 2024-12-20 First party, AWS, Hyperforce ISO 27018
NEN 7510-1:2017 Certificate 2024-12-20 First party, AWS, Hyperforce NEN 7510
SOC 1 Report - MuleSoft 2024-12-19 AWS SOC 1
SOC 2 Report - MuleSoft 2024-12-19 AWS SOC 2
SOC 3 Report - MuleSoft 2024-12-19 AWS SOC 3
PCI Attestation of Compliance (AoC) - MuleSoft 2024-12-17 AWS PCI DSS
PCI Responsibility Matrix - MuleSoft 2024-12-17 AWS PCI DSS
SOC 1 Report - Amazon Web Services (AWS) 2024-12-13 AWS, Hyperforce SOC 1
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 1
SOC 2 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce SOC 2
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
Vulnerability/Penetration Report Summary - MuleSoft 2024-12-05 AWS External Security Assessments
Salesforce Data Cloud Security White Paper (EN) 2024-11-30 Hyperforce FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
Vulnerability/Penetration Report Summary - OpenAI 2024-11-25 AWS External Security Assessments
[Whitepaper] Salesforce And The HIPAA Security Rule: Securing EPHI In The Cloud 2024-11-19 First party, AWS, Hyperforce HIPAA
SOC 1 Report - MuleSoft on Hyperforce 2024-11-18 Hyperforce SOC 1
SOC 2 Report - MuleSoft on Hyperforce 2024-11-18 Hyperforce SOC 2
SOC 3 Report - Mulesoft on Hyperforce 2024-11-18 Hyperforce SOC 3
Vulnerability/Penetration Report Summary - Agentforce 2024-11-13 Hyperforce External Security Assessments
PCI Attestation of Compliance (AoC) - MuleSoft on Hyperforce 2024-10-31 Hyperforce PCI DSS
PCI Responsibility Matrix - MuleSoft on Hyperforce 2024-10-31 Hyperforce PCI DSS
MuleSoft BCP Summary 2024 2024-10-02 AWS Resilience, BCP & DR
DR Test Summary 2024 - MuleSoft 2024-09-27 AWS Resilience, BCP & DR
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
PCI ASV Network Scan - MuleSoft 2024-08-14 AWS PCI DSS
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
QC2 Certification 2024-07-16 AWS, Hyperforce Other Reports and Certificates
Mulesoft IRAP Assessment letter 2024-07-11 AWS IRAP
IRAP Assessment Report - Mulesoft 2024-07-02 AWS IRAP
Salesforce EU Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce UK Processor Binding Corporate Rules 2024-07-01 First party, AWS, Hyperforce Salesforce BCRs
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
UK NHS Data Security and Protection Toolkit (DSPT) 2024-06-21 First party, Hyperforce Other Reports and Certificates
TX-RAMP - MuleSoft 2024-06-20 AWS TX-RAMP
Mulesoft ACSC Essential Eight Maturity report 2023-08-31 AWS IRAP
Data Privacy Framework (DPF) Registration 2023-07-17 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
Salesforce Distributed Denial of Service (DDoS) Risk Mitigation Overview 2023-06-12 First party, AWS FAQ's and White Papers
CSA CAIQ - Mulesoft (EN) 2023-03-13 AWS CSA STAR
Salesforce Vulnerability Management Program Overview 2022-12-12 First party, AWS, Hyperforce FAQ's and White Papers
Mulesoft IRAP Addendum Letter June 2022 2022-11-10 AWS IRAP
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
TISAX Assessment Results 2022-05-30 First party, AWS, Hyperforce TISAX
Securely Operating the MuleSoft Environment 2022-05-25 First party FAQ's and White Papers
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)
APEC Processor Seal - Salesforce 2020-07-10 First party, Hyperforce APEC Certification for Processors and Controllers