SFDC Certifications

Disaster Recovery & BCP

Business Continuity and Disaster Recovery

External Security Assessments

Attestation of penetration tests and security assessments performed by third parties

Financial Services Compliance

How Salesforce helps support financial service institutions with regulatory requirements

ISO 27001

Compliance with specific information security and risk management requirements

ISO 27017

Adherence with ISO/IEC 27002 Code of Practice controls for cloud services

ISO 27018

Adherence with Code of Practice controls for protection of personal information

PCI DSS

Validation of controls around cardholder data to reduce credit card fraud

Privacy Shield

A framework for complying with EU General Data Protection Regulation (GDPR) requirements

Salesforce BCRs

Binding Corporate Rules for the Processing of European Personal Data

SOC 1

Type II report covering internal controls over financial reporting systems

SOC 2

Type II report covering Security, Availability, Integrity, Confidentiality, and Privacy

SOC 3

Public report of Security, Availability, Integrity, Confidentiality, and Privacy controls

Standard Questionnaires, FAQ's and Whitepapers

Standardised questionnaires from industry groups, answers to common questions and white papers

TRUSTe Privacy Verified Seal

Responsible data collection and processing practices consistent with regulatory expectations

WCAG 2.1 AA

WCAG defines how to make web content more accessible to people with disabilities