Trust and Compliance Documentation
What's included in the Trust & Compliance documentation?
The SPARC ("Security, Privacy, and Architecture"), which describes:
- The architecture of the services,
- The security and privacy related audits and certifications received for the services, and
- The administrative, technical and physical controls applicable to these services
The NLI ("Notices and License Information") which describes the features, restrictions and notices associated with any:
- Information sourced from third parties or public sources and provided to customers via these services
- Functionality that allows customers to interact with social media, other websites, and/or non‐Salesforce applications, including licensor terms, and
- Desktop and mobile device software applications provided in connection with these services
The I&S ("Infrastructure & Sub-processors”) which:
- Describes the infrastructure environment for the services,
- Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and
- Lists the countries where customer data is stored and processed for these services
Some of the Services run on multiple infrastructures and are subject to more than one set of documentation. The Scope or Covered Services section of each document sets forth those Services or features that are covered by additional documentation.
Subscribe to notifications of new sub-processors.
Updates to the Documentation are made from time to time and are reflected in the Change Log for the applicable Trust & Compliance documents.
Please see the salesforce Open Source Notices website for any additional notices required by licensors related to distributed components of the above services.
How to Find Your Trust & Compliance Documentation
To find the right Documentation applicable to the Services, locate your Service and Infrastructure to find the SPARC and NLI for that Service. All Services share a common I&S document to make it easier to find all of the entities that host or process data for our Services.
Some Services can run on Hyperforce, or alternative infrastructure. To confirm which Infrastructure your organization is running on, see View instance information for your Salesforce Organization, and Where is my Salesforce instance located?.
Salesforce Services and Additional Services
- B2B Commerce on Lightning Experience
- B2B2C Commerce
- Chatter
- Consumer Goods Cloud
- Database.com
- Digital Process Automation
- Einstein Relationship Insights
- Emergency Program Management
- Employee Productivity (formerly IT Service Center - Agent and Employee Service - Agent)
- Experience Cloud (formerly Community Cloud)
- Financial Services Cloud
- Health Cloud
- IoT Explorer (including IoT Plus)
- Intelligent Form Reader
- Lightning Platform (including Force.com and Salesforce Connect)
- Loyalty Management
- Manufacturing Cloud
- Messaging
- Privacy Center
- Public Sector Solutions
- Sales Cloud
- Service Cloud (including Field Services managed package)
- Salesforce Private Connect
- Salesforce CPQ and Salesforce Billing
- Salesforce Maps
- Salesforce Order Management
- Service Cloud
- Service Cloud Voice
- Shift Management
- Site.com
- Sustainability Cloud
- Tableau CRM (formerly Einstein Analytics) (including Einstein Discovery and Salesforce Data Pipelines)
- WDC
- Workforce Engagement Management
- Workplace Command Center
- the Salesforce.org LLC ("Salesforce.org") services branded as:
- Accounting Subledger
- Admissions Connect
- foundationConnect (provisioned on or after August 19, 2019)
- Grants Management
- Nonprofit Cloud Case Management
- Salesforce Advisor Link
- Salesforce.org Insights Platform: Data Integrity
- Student Success Hub
- SPARC (2021-09-17)
- NLI (excluding Messaging) (2021-08-27)
- LiveMessage and Messaging NLI (2021-08-27)
Audience Studio and Data Studio (formerly branded as Krux)
B2B Commerce
B2C Commerce/Commerce Cloud
Customer 360 Data Manager
Data.com
Einstein Platform
- Einstein Bots
- Einstein Conversation Insights
- Einstein Copy Insights
- Einstein Prediction Builder
- Einstein Vision and Language
- Einstein Vision for Social Studio
- High Velocity Sales
- Pardot Einstein
- Sales Cloud Einstein
- Salesforce Inbox
- Service Cloud Einstein
- the Einstein Features
- Activity Capture
- Article Recommendations
- Bots
- Case Classification
- Case Wrap-up
- Deal Insights
- Intelligent Forecasting Machine Learning
- Object Detection
- Opportunity Scoring
- Prediction Builder
- Recommendation Builder
- Referral Scoring
- Reply Recommendation
Government Cloud Plus
Heroku
LiveMessage, myTrailhead, Quip, Salesforce.org Philanthropy Cloud and Salesforce.org Elevate
- SPARC (2021-09-17)
- LiveMessage and Messaging NLI (2021-08-27)
- myTrailhead NLI (2021-08-27)
- Quip NLI (2021-09-17)
- Salesforce.org NLI (2021-08-27)
Marketing Cloud
- Advertising Studio (including Advertising Audiences and Journey Builder Advertising)
- Datorama
- Datorama Reports for Marketing Cloud
- Evergage
- ExactTarget (including Email Studio, Journey Builder and Mobile Studio)
- Interaction Studio (Legacy)
- Interaction Studio
- Marketing Cloud Einstein services branded as
- Behavioral Triggers
- Einstein Content Tagging
- Einstein Copy Insights
- Einstein Email Recommendations
- Einstein Engagement Frequency
- Einstein Engagement Scoring for Email (formerly branded as Predictive Scoring)
- Einstein Engagement Scoring for Mobile
- Einstein Messaging Insights
- Einstein Recommendations
- Einstein Send Time Optimization for Marketing Cloud
- Einstein Send Time Optimization for Pardot Einstein Content Selection
- Einstein Web Recommendations
- Live Weather Block
- Personalization Builder
- Predictive Email
- Predictive Intelligence
- Predictive Web
- Web & Mobile Analytics
- Web Personalization
- Marketing Cloud for Nonprofits
- Social Studio
MuleSoft
- MuleSoft or the Anypoint Platform
- MuleSoft Composer
Pardot
- Pardot
- Einstein Send Time Optimization for Pardot