Salesforce.com Completes SAS 70 Type II Certification for Customers' Regulatory Compliance

SAN FRANCISCO, Calif. — December 21, 2004 — Salesforce.com, the market and technology leader in on-demand customer relationship management (CRM), today announced it has completed a SAS 70 (Statement on Auditing Standards No. 70) Type II audit of its online CRM service by a nationally recognized public accounting firm. This widely recognized audit standard can help salesforce.com customers and their auditors to address the requirements of Sarbanes-Oxley.

The SAS 70 is an internationally recognized auditing standard developed by the American Institute of Certified Public Accountants. A SAS 70 Type II audit is an in-depth analysis of a service organization's control over information technology and related processes. A SAS 70 Type II audit is often required by public companies for compliance requirements or for companies that want assurance that a service organization's processes, procedures and controls described in the report are operating effectively. Successful completion of a SAS 70 Type II audit indicates that processes, procedures and controls have been formally reviewed.

Salesforce.com's SAS 70 Type II audit helps affirm that salesforce.com provides a consistent, reliable and secure operating environment to support its 12,500 customers and 195,000 subscribers worldwide.

"With the increased emphasis on integrity and security in today's business environment, and a concern for regulatory standards, our customers have been asking for a SAS 70 Type II audit," said salesforce.com Chairman and CEO Marc Benioff. "We've met our customers' demands with the assurance that we've instituted the appropriate safeguards to help them meet their own goals for success."