Trust and Compliance Documentation

Find Trust and Compliance information for each Salesforce service.
 

What's included in the Trust & Compliance documentation?

The SPARC ("Security, Privacy, and Architecture"), which describes:

  • The architecture of the services,
  • The security and privacy related audits and certifications received for the services, and
  • The administrative, technical and physical controls applicable to these services

The NLI ("Notices and License Information") which describes the features, restrictions and notices associated with any:

  • Information sourced from third parties or public sources and provided to customers via these services
  • Functionality that allows customers to interact with social media, other websites, and/or non‐Salesforce applications, including licensor terms, and
  • Desktop and mobile device software applications provided in connection with these services

The I&S ("Infrastructure & Sub-processors”) which:

  • Describes the infrastructure environment for the services,
  • Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and
  • Lists the countries where customer data is stored and processed for these services

Some of the Services run on multiple infrastructures and are subject to more than one set of documentation. The Scope or Covered Services section of each document sets forth those Services or features that are covered by additional documentation. 

Subscribe to notifications of new sub-processors.

Updates to the Documentation are made from time to time and are reflected in the Change Log for the applicable Trust & Compliance documents.

Please see the salesforce Open Source Notices website for any additional notices required by licensors related to distributed components of the above services.

 

How to Find Your Trust & Compliance Documentation

To find the right Documentation applicable to the Services, locate your Service and Infrastructure to find the SPARC, NLI, and I&S for that Service.

Some Services run on Salesforce's Unified Cloud (Hyperforce). To confirm which Infrastructure your organization is running on, enter your OrgID into the Salesforce Status website. The site will return your instanceID. The Salesforce Unified Cloud (Hyperforce) documents apply to services running on instances AP South (IND1, IND5, IND7, IND9, IND2s, and IND3s), AP Southeast (AUS1, AUS3, AUS5, AUS7, AUS9, AUS2s, AUS4s, and AUS8s), and US East (USA1, USA2s, and USA3s).

Salesforce Services and Additional Services

 
  • B2B Commerce on Lightning Experience
  • B2B2C Commerce
  • Chatter
  • Consumer Goods Cloud
  • Database.com
  • Digital Process Automation
  • Einstein Relationship Insights
  • Emergency Program Management
  • Employee Productivity
  • Employee Service - Agent (formerly IT Service Center - Agent)
  • Experience Cloud (formerly Community Cloud)
  • Financial Services Cloud
  • Health Cloud
  • IoT Explorer (including IoT Plus)
  • Intelligent Form Reader
  • Lightning Platform (including Force.com and Salesforce Connect)
  • Loyalty Management
  • Manufacturing Cloud
  • Messaging
  • Privacy Center
  • Public Sector Solutions
  • Sales Cloud
  • Service Cloud (including Field Services managed package)
  • Salesforce Private Connect
  • Salesforce CPQ and Salesforce Billing
  • Salesforce Maps
  • Salesforce Order Management
  • Service Cloud
  • Service Cloud Voice
  • Shift Management
  • Site.com
  • Sustainability Cloud
  • Tableau CRM (formerly Einstein Analytics) (including Einstein Discovery and Salesforce Data Pipelines)
  • WDC
  • Workforce Engagement Management
  • Workplace Command Center
  • the Salesforce.org LLC ("Salesforce.org") services branded as:
    • Accounting Subledger
    • Admissions Connect
    • foundationConnect (provisioned on or after August 19, 2019)
    • Grants Management
    • Nonprofit Cloud Case Management
    • Salesforce Advisor Link
    • Salesforce.org Insights Platform: Data Integrity
    • Student Success Hub
 
Trust & Compliance Documentation
Trust & Compliance Documentation for Salesforce Unified Cloud (Hyperforce)
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-06-15)

Audience Studio and Data Studio (formerly branded as Krux)

 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-05-07)

B2B Commerce

 
Trust & Compliance Documentation
  • SPARC (2021-05-14)
  • NLI (2021-06-15)
  • I&S (2021-05-07)

B2C Commerce/Commerce Cloud

 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-05-07)

Customer 360 Audiences

 
Trust & Compliance Documentation for Salesforce Unified Cloud (Hyperforce)
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-05-07)

Customer 360 Data Manager

 
Trust & Compliance Documentation 
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-06-08)

Data.com

 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-05-07)
  • I&S (2021-05-07)

Einstein Platform

 
  • Einstein Bots
  • Einstein Conversation Insights
  • Einstein Copy Insights
  • Einstein Engagement Scoring for Email
  • Einstein Prediction Builder
  • Einstein Vision and Language Services
  • Einstein Vision for Social Studio
  • High Velocity Sales
  • Intelligent Forecasting Machine Learning
  • Pardot Einstein
  • Sales Cloud Einstein
  • Salesforce Inbox
  • Service Cloud Einstein
  • the Einstein Features
    • Activity Capture
    • Article Recommendations
    • Bots
    • Case Classification
    • Object Detection
    • Opportunity Scoring
    • Prediction Builder
 
Trust & Compliance Documentation
  • SPARC (2021-06-15)
  • NLI (2021-06-15)
  • I&S (2021-06-15)

Government Cloud Plus

 
Trust & Compliance Documentation

Heroku

 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-06-04)
  • I&S (2021-05-07)

IoT Cloud

 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-05-07)

LiveMessage, myTrailhead, Salesforce Anywhere (including Quip), Salesforce.org Philanthropy Cloud and Salesforce.org Elevate

 
Trust & Compliance Documentation
 

Marketing Cloud

 
  • Advertising Studio (including Advertising Audiences and Social.com)
  • Datorama
  • Datorama Reports for Marketing Cloud
  • Einstein Send Time Optimization for Pardot
  • Evergage
  • ExactTarget (including Email Studio, Journey Builder and Mobile Studio)
  • Interaction Studio (Legacy)
  • Interaction Studio
  • Marketing Cloud Einstein (formerly branded as Predictive Intelligence)
  • Marketing Cloud for Nonprofits
  • Social Studio
 
Trust & Compliance Documentation
  • SPARC (2021-07-20)
  • NLI (2021-07-20)
  • I&S (2021-07-20)
Trust & Compliance Documentation for Salesforce Unified Cloud (Hyperforce)
  • SPARC (2021-05-07)
  • NLI (2021-07-20)
  • I&S (2021-07-20)

MuleSoft

 
  • MuleSoft or the Anypoint Platform
  • MuleSoft Composer
 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-06-04)
  • I&S (2021-05-07)

Pardot

 
  • Pardot
  • Einstein Send Time Optimization for Pardot
 
Trust & Compliance Documentation
  • SPARC (2021-05-07)
  • NLI (2021-06-15)
  • I&S (2021-05-14)

Tableau Online

 
Trust & Compliance Documentation
  • SPARC (2021-06-15)
  • NLI (2021-06-04)
  • I&S (2021-05-07)

Vlocity

 
Trust & Compliance Documentation
  • SPARC (2021-06-15)
  • NLI (2021-06-15)
  • I&S (2021-05-07)