Compliance engineered for the Cloud
Salesforce maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of Trust.

SOC 1

The American Institute of Certified Public Accountants (AICPA) Service Organization Controls (SOC) reports give assurance over control environments as they relate to the retrieval, storage, processing, and transfer of data. The reports cover IT General controls and controls around availability, confidentiality and security of customer data. The SOC 1 reports are primarily concerned with examining controls that are relevant for the financial reporting of customers. Additional information can be found at https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/aicpasoc1report.html

Applicable documents by service

NameUpdated OnInfrastructureServices
SOC 1 Bridge (Gap) Letter - Spiff 2025-02-12 GCP Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Report - Spiff 2025-02-12 GCP Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Bridge (Gap) Letter - Salesforce Services & Corporate Services 2025-02-04 First party, AWS Salesforce Government Cloud Plus
Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Bridge (Gap) Letter - Commerce Cloud 2025-01-06 First party B2C Commerce / Commerce Cloud
SOC 1 Bridge (Gap) Letter - Heroku 2025-01-06 AWS Heroku
SOC 1 Bridge (Gap) Letter - MuleSoft 2025-01-06 AWS MuleSoft
SOC 1 Bridge (Gap) Letter - MuleSoft on Hyperforce 2025-01-06 Hyperforce MuleSoft
SOC 1 Bridge (Gap) Letter - Salesforce Data Cloud 2025-01-06 Hyperforce Customer Data Cloud
SOC 1 Bridge (Gap) Letter - Salesforce Services on Hyperforce 2025-01-06 Hyperforce B2B Commerce
Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Bridge (Gap) Letter - Spiff on Hyperforce 2025-01-06 Hyperforce Salesforce Professional Services
SOC 1 Report - Heroku 2024-12-19 AWS Heroku
SOC 1 Report - MuleSoft 2024-12-19 AWS MuleSoft
SOC 1 Report - Salesforce Services 2024-12-17 First party, AWS B2B Commerce
Einstein Platform
Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Report - Salesforce Services on Hyperforce 2024-12-17 Hyperforce B2B Commerce
Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Report - Amazon Web Services (AWS) 2024-12-13 AWS, Hyperforce Audience Studio and Data Studio
Customer Data Cloud
Einstein Platform
Heroku
LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate
Marketing Cloud - Account Engagement
MuleSoft
MuleSoft Government Cloud
Salesforce Services, Sales Cloud, Service Cloud and Industries
Slack
Tableau
SOC 1 Report - Commerce Cloud 2024-12-13 First party B2C Commerce / Commerce Cloud
SOC 1 Report - Salesforce Data Cloud (fka CDP) 2024-12-13 Hyperforce Customer Data Cloud
SOC 1 Report - Corporate Services 2024-12-09 First party, AWS, Hyperforce Audience Studio and Data Studio
B2B Commerce
B2C Commerce / Commerce Cloud
Customer Data Cloud
Einstein Platform
Heroku
LiveMessage, Sales Enablement, Quip and Salesforce.org Elevate
Marketing Cloud
Marketing Cloud - Account Engagement
MuleSoft
Salesforce Government Cloud Plus
Salesforce Professional Services
Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Report - MuleSoft on Hyperforce 2024-11-18 Hyperforce MuleSoft
SOC 1 Report - Salesforce Spiff on Hyperforce 2024-11-11 Hyperforce Salesforce Services, Sales Cloud, Service Cloud and Industries
SOC 1 Report - Government Cloud Plus 2022-12-19 AWS Salesforce Government Cloud Plus
SOC 1 Bridge (Gap) Letter - Government Cloud Plus 2022-04-01 AWS Salesforce Government Cloud Plus
SOC 1 Bridge (Gap) Letter - Advertising Studio on Hyperforce 2022-01-03 Hyperforce Marketing Cloud
SOC 1 Report - Advertising Studio on Hyperforce 2021-12-01 Hyperforce Marketing Cloud