generated: '2026-08-13'
method: searched
source: https://compliance.salesforce.com/
note: 'Salesforce runs two distinct public surfaces: trust.salesforce.com (real-time service availability
  and security advisories, which 307-redirects its /compliance path to compliance.salesforce.com) and
  compliance.salesforce.com (the document portal that publishes the attestation reports and certificates).
  Certifications are held at the Salesforce corporate/service level; Account Engagement inherits them
  as a Salesforce cloud rather than holding separate certificates. Scope per certificate varies by service
  — check the individual report before relying on one for Account Engagement specifically.'
trust_center:
  url: https://trust.salesforce.com/
  http_status: 200
compliance_portal:
  url: https://compliance.salesforce.com/
  http_status: 200
  documents_url: https://compliance.salesforce.com/en/documents
status_page: https://status.salesforce.com/
certification_count: 33
certifications:
- name: C5 (ISAE 3000)
  source: https://compliance.salesforce.com/
- name: CCCS Assessment - Protected B
  source: https://compliance.salesforce.com/
- name: CJIS
  source: https://compliance.salesforce.com/
- name: CSA STAR
  source: https://compliance.salesforce.com/
- name: DoD IL2
  source: https://compliance.salesforce.com/
- name: DoD IL4
  source: https://compliance.salesforce.com/
- name: DoD IL5
  source: https://compliance.salesforce.com/
- name: EU Cloud Code of Conduct
  source: https://compliance.salesforce.com/
- name: FedRAMP High
  source: https://compliance.salesforce.com/
- name: FedRAMP Moderate
  source: https://compliance.salesforce.com/
- name: GDPR
  source: https://compliance.salesforce.com/
- name: HIPAA
  source: https://compliance.salesforce.com/
- name: HITRUST
  source: https://compliance.salesforce.com/
- name: IRAP
  source: https://compliance.salesforce.com/
- name: ISMAP
  source: https://compliance.salesforce.com/
- name: ISO 22301
  source: https://compliance.salesforce.com/
- name: ISO 27001
  source: https://compliance.salesforce.com/
- name: ISO 27017
  source: https://compliance.salesforce.com/
- name: ISO 27018
  source: https://compliance.salesforce.com/
- name: ISO 42001
  source: https://compliance.salesforce.com/
- name: ISO 9001
  source: https://compliance.salesforce.com/
- name: NEN 7510
  source: https://compliance.salesforce.com/
- name: NIST SP 800-171
  source: https://compliance.salesforce.com/
- name: PCI DSS
  source: https://compliance.salesforce.com/
- name: PrivacyMark
  source: https://compliance.salesforce.com/
- name: SOC 1
  source: https://compliance.salesforce.com/
- name: SOC 2
  source: https://compliance.salesforce.com/
- name: SOC 3
  source: https://compliance.salesforce.com/
- name: Salesforce BCRs
  source: https://compliance.salesforce.com/
- name: TISAX
  source: https://compliance.salesforce.com/
- name: TX-RAMP
  source: https://compliance.salesforce.com/
- name: U.S. Data Privacy Framework (DPF)
  source: https://compliance.salesforce.com/
- name: WCAG 2.2 AA
  source: https://compliance.salesforce.com/
privacy:
  privacy_policy: https://www.salesforce.com/company/privacy/
  bcrs: true
  dpf: true
  note: Salesforce Binding Corporate Rules and U.S. Data Privacy Framework participation are both listed
    as document categories.