Salesforce Trust

 

Trust and Compliance Documentation

This page provides links to the Trust and Compliance information
for each Salesforce service.

Description

The Trust & Compliance documentation includes:

  • The SPARC ("Security, Privacy, and Architecture") which describes:
    • The architecture of the services,
    • The security and privacy related audits and certifications received for the services, and
    • The administrative, technical and physical controls applicable to these services
  • The NLI ("Notices and License Information") which describes the features, restrictions, and notices associated with any:
    • Information sourced from third parties or public sources and provided to customers via these services
    • Functionality that allows customers to interact with social media, other websites, and/or non‐Salesforce applications, including licensor terms, and
    • Desktop and mobile device software applications provided in connection with these services
  • The I&S "Infrastructure & Sub-processors”) which:
    • Describes the infrastructure environment for the services
    • Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and
    • Lists the countries where customer data is stored and processed for these services
  • Open Source notices required by licensors of any open source libraries or components related to any of the applicable services

Some of the Services run on multiple infrastructures and are subject to more than one set of documentation. The Scope or Covered Services section of each document sets forth those Services or features that are covered by additional documentation.


Salesforce customers may subscribe to notifications of new sub-processors.

Updates to the Documentation are made from time to time and are reflected in the Change Log for the applicable Trust & Compliance documents.


How to Find Your Trust & Compliance Documentation

To find the right Documentation applicable to the Services, locate your Service under the Service column in the table below along with the corresponding Documentation under the Infrastructure column to find the SPARC, NLI, and I&S for that Service.

Some Services run on Salesforce's Unified Cloud Infrastructure. To confirm which Infrastructure your organization is running on, enter your OrgID into the Salesforce Status website. The site will return your instanceID. The Salesforce Unified Cloud Infrastructure documents apply to services running on instances AP South (IND1, IND5, IND7, IND9, IND2s, and IND3s), AP Southeast (AUS1, AUS3, AUS5, AUS7, AUS9, AUS2s, AUS4s, and AUS8s), and US East (USA1, USA2s, and USA3s).

ServiceInfrastructure

Trust & Compliance DocumentationTrust & Compliance Documentation for Salesforce Unified Cloud (Hyperforce)
  • B2B Commerce on Lightning Experience
  • Chatter
  • Consumer Good Cloud
  • Customer 360 Audiences (Salesforce UCI Org SPARC)
  • Database.com
  • Einstein Relationship Intelligence
  • Emergency Program Management
  • Employee Productivity
  • Experience Cloud (formerly Community Cloud)
  • Financial Services Cloud
  • Health Cloud
  • IoT Explorer (including IoT Plus)
  • Intelligent Form Reader
  • IT Service Center - IT Agent
  • Lightning Platform (including Force.com and Salesforce Connect)
  • Loyalty Cloud
  • Manufacturing Cloud
  • Messaging
  • Privacy Center
  • Public Sector Solutions
  • Sales Cloud
  • Service Cloud (including Field Services managed package)
  • Salesforce Private Connect
  • Salesforce CPQ and Salesforce Billing
  • Salesforce Maps
  • Salesforce Order Management
  • Service Cloud
  • Service Cloud Voice
  • Shift Management
  • Site.com
  • Sustainability Cloud
  • Tableau CRM (formerly Einstein Analytics) (including Einstein Discovery)
  • WDC
  • Workplace Command Center
  • the Salesforce.org LLC ("Salesforce.org") services branded as:
    • Accounting Subledger
    • Admissions Connect
    • foundationConnect (provisioned on or after August 19, 2019)
    • Grants Management
    • Nonprofit Cloud Case Management
    • Salesforce Advisor Link
    • Salesforce.org Insights Platform: Data Integrity
    • Student Success Hub

Audience Studio and Data Studio (formerly branded as Krux)


B2B Commerce


  • B2C Commerce / Commerce Cloud
  • Einstein Predictive Sort

Customer 360 Audiences


Customer 360 Data Manager


Data.com


  • Einstein Bots
  • Einstein Copy Insights
  • Einstein Engagement Scoring
  • Einstein Prediction Builder
  • Einstein Vision and Language Services
  • Einstein Vision for Social Studio
  • High Velocity Sales
  • Pardot Einstein
  • Sales Cloud Einstein
  • Salesforce Inbox
  • Service Cloud Einstein
  • the Einstein Features
    • Activity Capture
    • Article Recommendations
    • Bots
    • Case Classification
    • Object Detection
    • Opportunity Scoring
    • Prediction Builder
 

Government Cloud Plus


Heroku


IoT Cloud


LiveMessage, myTrailhead, Salesforce Anywhere (including Quip), Salesforce.org Philanthropy Cloud and Elevate


  • Advertising Studio (including Advertising Audiences and Social.com)
  • Datorama
  • Datorama Reports for Marketing Cloud
  • Evergage
  • ExactTarget (including Email Studio, Journey Builder and Mobile Studio)
  • Interaction Studio (Legacy)
  • Interaction Studio
  • Marketing Cloud Einstein (formerly branded as Predictive Intelligence)
  • Social Studio

  • MuleSoft or the Anypoint Platform
  • MuleSoft Composer

Pardot


Tableau Online


Vlocity


Salesforce Open Source Notices

Notice required by licensors of any open source libraries or components related to any of the applicable services.

Salesforce customers may subscribe to notifications of new sub-processors