Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

MuleSoft Government Cloud

Applicable only to the services branded as MuleSoft Government Cloud. The MuleSoft Government Cloud is a secure, FedRAMP-compliant deployment environment that enables U.S. Government agencies to use the Anypoint Platform in the cloud. The Mulesoft Government Cloud environment has been granted an agency-sponsored provisional Authority to Operate (ATO) of *moderate* impact or below.

Applicable documents by category

NameUpdated OnInfrastructureCategory
ISO 9001:2015 - Salesforce, Inc. 2025-01-31 First party Other Reports and Certificates
CJIS - MuleSoft Government Cloud 2025-01-14 AWS CJIS
SOC 2 Report - Amazon Web Services (AWS) 2025-01-10 AWS, Hyperforce SOC 2
Vulnerability Management and Response Plan Summary 2025-01-02 First party, AWS, Hyperforce FAQ's and White Papers
SOC 1 Report - Amazon Web Services (AWS) 2024-12-13 AWS, Hyperforce SOC 1
Salesforce Secure Development Lifecycle Overview 2024-12-05 First party, AWS, Hyperforce FAQ's and White Papers
SOC 2 Report - OpenAI 2024-11-25 AWS, Hyperforce SOC 2
Vulnerability/Penetration Report Summary - OpenAI 2024-11-25 AWS External Security Assessments
Salesforce Security (Incident) Response Plan 2024-09-05 First party, AWS, Hyperforce FAQ's and White Papers
GDPR - Data Protection Impact Assessments & Salesforce Services 2024-08-14 First party, AWS, Hyperforce GDPR
UK Cyber Essentials Plus Certificate 2024-07-24 First party, AWS, Hyperforce Other Reports and Certificates
Salesforce Health & Safety Policy 2024-06-26 First party, AWS, Hyperforce, Azure, GCP Resilience, BCP & DR
US Dept. of Defense Cybersecurity Maturity Model (CMMC) & Salesforce Whitepaper 2024-03-14 First party, AWS FAQ's and White Papers
DoD IL2 - MuleSoft Government Cloud 2023-07-27 AWS DoD IL2
Salesforce Security (Incident) Response Plan (JP) 2022-10-04 First party, AWS, Hyperforce FAQ's and White Papers
NIST SP 800-171 Attestation Letter - MuleSoft Government Cloud 2022-05-17 AWS NIST SP 800-171
FedRAMP - MuleSoft Government Cloud 2021-05-04 AWS FedRAMP Moderate
International Transfers of EU Personal Data to Salesforce's Services FAQ 2020-07-16 First party, AWS, Hyperforce U.S. Data Privacy Framework (DPF)