Compliance

Find essential information on our compliance policies, protocols, and guidelines, ensuring our practices meet the highest legal and ethical standards. Our resources cover regulatory requirements, ethical standards, and best practices.

General Compliance

The trust and success of our customers are the highest priorities for Salesforce. Compliance plays a key role in achieving these goals. We are committed to not only abide by the laws and regulations that apply to us as we conduct business around the world, but to be a leader in the areas of ethics and compliance. As recognition of this commitment, the Ethisphere Institute has honored Salesforce as one of the "World’s Most Ethical Companies®" for 15 years, most recently in 2024. The Institute’s selection process evaluates organizations’ culture, environmental and social practices, ethics and compliance activities, governance, diversity, and initiatives to support a strong value chain. While we are delighted by this distinction, we continue to seek new ways to lead our community in these areas. The following documents provide a glimpse into how we maintain compliance at Salesforce.

Code of Conduct (English)

Business Conduct Principles

Environmental, Social, and Governance (ESG) Compliance: Guiding Principles and Practices Statement

Código de Conducta (Castilian Spanish)

Côdigo de Conducta (Latin American Spanish)

Côdigo de Conducta (Brazilian Portuguese)

Code de Conduite (French)

Verhaltenskodex (German)

Gedragscode (Dutch)

Codice di Condotta (Italian)

行動規範 (Chinese Simplifired)

行動規範 (Japanese)

This month, the European Union’s Digital Services Act (DSA) will go into effect. The Act outlines a series of content moderation regulations for online intermediaries and platforms operating in the EU.

Salesforce is committed to creating safe, trusted experiences and we support efforts to ensure a transparent, competitive and innovative digital economy. In line with the DSA’s requirements, we publish and regularly update the number of active users on our online platforms in the EU. And beginning this year, Salesforce will publish regular transparency reports.

Reporting content to Salesforce

Law enforcement: dsa-law-enforcement-reports at salesforce dot com

National authorities: dsa-national-authorities-reports at salesforce dot com

Trusted flaggers: dsa-trusted-flaggers at salesforce dot com

End-users: salesforce.com/form/other/dsareport

Single point of contact
Pursuant to Article 11 of the DSA, Salesforce has designated a single point of contact to enable direct communication with the European Commission, EU Member States’ authorities, and European Board for Digital Services regarding the application of the DSA. These entities can contact Salesforce at dsa-poc at salesforce dot com.

Learn more about Slack’s compliance with the DSA.

Pursuant to Article 24(2) of Regulation (EU) 2022/2065, Salesforce.com, Inc has calculated the average monthly recipients of our online platform services in the EU based on the period 1 January 2024 to 30 June 2024, and determined the average number was well below the 45 million active recipients threshold for being designated as a very large platform. We will continue to monitor and update the number as required by Article 24(2). Please note the online platforms in scope of the Regulation below:

  • Tableau Public had 56,713 average monthly active recipients
  • Trailblazer Community had 69,090 average monthly active recipients

The United Kingdom Modern Slavery Act of 2015 requires businesses to publish a statement regarding efforts taken to prevent slavery and human trafficking in their business and supply chain. Read more about our compliance with the UK Modern Slavery Act here.

The Australian Modern Slavery Act of 2018 requires businesses to publish a statement regarding efforts taken to prevent slavery and human trafficking in their business and supply chain. Read more about our compliance with the Australian Modern Slavery Act here.

The Australian whistleblower protections in Corporations Act 2001 (Cth) (Corporations Act) (sections 1317AA to 1317AK) and Taxation Administration Act 1958 (Cth) (sections 14ZZT to 14ZZZE) (Taxation Administration Act) (together, the AU Whistleblower Protection Laws) requires businesses to publish a Australian Whistleblower Protection policy. Access our Australian Whistleblower Protection Policy here.

Under 20 CFR § 655.734, Salesforce employs specialty occupation nonimmigrant workers at approved work location(s). To request Labor Condition Application(s) and/or Public Access Files, please contact immigration@salesforce.com. Complaints alleging misrepresentation of material facts in the Labor Condition Application and/or failure to comply with the terms of the Labor Condition Application may be filed with any office of the Wage and Hour Division of the United States Department of Labor.

Salesforce.com Singapore Pte Ltd is registered for Malaysia Service Tax effective 1 Jan 2020 in accordance with the Malaysia Service Tax Act 2018. Digital services provided to all Malaysia consumers will be charged Malaysia service tax of 6% on top of the agreed service fees.

Please click on this link to see CSR policy as per section 135(4) of Indian Companies Act 2013.

The Companies Act 2006 ("CA 2006") requires UK companies that are considered to be "large" under sections 465 and 467 of the CA 2006 to include in the annual Directors' Report in the annual financial statements, and to publish, a statement of how directors have complied with their duty to have regard to the stakeholder engagement requirements in section 172(1)(a)-(f) of CA 2006. Access here the latest statements by Salesforce UK Limited, and SFDC EMEA Data Centre Limited.

The Large & Medium-sized Companies and Groups (Accounts & Reports) Regulations 2008 (SI 2008/410) (as amended) requires "very large" UK companies to include a statement in the company's annual Directors' Report included in the annual financial statements and to publish such statement of the corporate governance procedures or code adopted by the company and how they have been applied by the company. Read Salesforce UK Limited's statement here.

The Norwegian Transparency Act requires businesses to publish a statement regarding efforts taken to prevent adverse impacts on human rights and decent working conditions in their business and supply chain. Read more about SFDC Norway AS’ compliance with the Transparency Act here and for information requests please contact norwaytransparencyact@salesforce.com

The Fighting Against Forced Labour and Child Labour in Supply Chains Act requires businesses to publish an annual statement specifying the efforts taken to prevent and reduce the risk of forced and child labor, modern slavery and human trafficking anywhere in their own business or their supply chain. This joint statement is prepared on behalf of Salesforce.com Canada Corporation and its controlling entity, SFDC Holding Co.

If you have questions regarding our privacy practices, please fill out this form, or email us at privacy@salesforce.com. For more information about contacting us, visit the “Contacting Us” section here to learn more about contacting Salesforce Privacy.

At Salesforce, we believe that businesses can be powerful platforms for social change and that our higher purpose is to drive Equality for All. Disability Inclusion is fundamental to this belief. We have an ambition to become the number one employer for people with disabilities, for the products we sell to be accessible by people with disabilities, and for all persons to have full and equal access to our offices, our meetings and our events, and to have technology that would empower people to bring their authentic self to work with confidence.

Salesforce is committed to fulfilling our requirements under the Accessibility for Ontarians with Disabilities Act, 2005. This accessibility plan outlines the steps we are taking to meet those requirements and to improve opportunities for people with disabilities. Our plan shows how we will play our role in making Ontario an accessible province for all Ontarians. The plan is reviewed and updated at least once every 5 years.

Customer Service
Developing accessible products that allow all individuals to succeed in the Salesforce ecosystem is a top priority. We have an industry leading Accessibility Support Team, a team that creates incredible support experiences for customers seeking to build accessible environments on the Salesforce platform. “We have an important duty to ensure every single Salesforce customer and partner gets the support they need from Salesforce,” said Jim Roth, EVP, Support at Salesforce. “We’re proud to have a strong focus on equality and inclusion for our Trailblazers with disabilities. Partnering with the Office of Accessibility in this way furthers our vision of providing a support experience that is personal and effortless. We are committed to continued disability inclusion and look forward to growing this team to help our customers.”

Information and Communications
At Salesforce, we recognize the powerful insights that users with disabilities bring to our product development process, and we’re committed to creating products that work for everyone. Accessibility is much more than just the “right thing to do.” It's an exponential market opportunity and an economic imperative. Consider the tools around you: reading glasses, the touch screen on your mobile device, captions, your computer keyboard, email, flexible straws, automatic door openers — and so much more. Created by and with people with disabilities, each of these accessibility innovations became ubiquitous tools for billions of people.

We include individuals with disabilities throughout the development process to help us understand the different ways people experience our products, increase adoption, and uncover technology solutions that meet all user needs. It’s all part of how we strive to create products and features that work for everyone.

Employment
Our goals are to empower all employees with disabilities to bring their full authentic selves to work with confidence — and to build one of the most inclusive workplaces in the industry. People with disabilities deserve an equal opportunity to gain skills for meaningful employment, whether at Salesforce or anywhere else. To help make sure everyone gets the training and resources they need to be successful, we’ve designed our workforce programs with the disability community in mind. We train every Ontario employee as soon as practicable after being hired and provide training in respect of any changes to the policies. This is training specific to our policies and practices relating to AODA, accommodations, and accessibility. We maintain records of the training provided including the dates on which the training was provided and the number of individuals to whom it was provided.

Procurement
Salesforce is committed to working together to advance the procurement of digital products and services that are accessible to and usable by all our stakeholders with disabilities, including our employees, job applicants, customers, and members of the public. This work is based on applicable global accessibility laws, regulations, and standards, including the Web Content Accessibility Guidelines (WCAG), 2.1 Level AA and subsequent WCAG updates. We are an early signer to the Disability:IN Procure Access Statement, and have updated our Vendor Code of Conduct, asking all vendors to be committed to accessibility.

Training
The journey to accessibility is a process, and we are committed to continual improvement over time. We offer regular internal training that cover both disability inclusion, and accessibility. We also offer training externally, through Trailhead. We are committed to training our employees in Ontario’s accessibility laws and aspects of the Ontario Human Rights Code that relate to persons with disabilities.

See the Human Rights Policy page for more information.

Spain's Non-Financial Information and Diversity Act (Lay 11/2018) requires certain companies to disclose non-financial information as part of their annual reporting to promote transparency and sustainability.  The Act requires that companies disclose information on environmental matters, social and employee-related issues, respect for human rights, anti-corruption and bribery measures, and diversity policies in governance.  Salesforce's most recent NFI Report is located here.

The Bilane Carbone is a French carbon accounting methodology developed by the French Agency for Ecological Transition (ADEME) to help organizations measure and manage their greenhouse gas (GHG) emissions.  Large companies and public entities are required to submit a report.  Salesforce's most recent Bilane Carbone report is located here.

Global Trade Compliance

As a U.S.-headquartered company, Salesforce complies with U.S. and other applicable export control and sanctions regulations, and we require our customers and partners to do the same when using our products, services, and technologies.

Salesforce complies with U.S. regulations related to embargoed countries and regions. As such, Salesforce currently prohibits use of its products and services in Cuba, Iran, North Korea, Syria, and the regions of Crimea, Luhansk People's Republic (LNR), and Donetsk People's Republic (DNR). Because this list of countries and regions may change from time to time, customers and their users are urged to consult the relevant regulations, including the U.S. Export Administration Regulations (the “EAR”, 15 CFR Part 730 et seq.), U.S. Office of Foreign Assets Control sanctions programs, and Canada's Area Control List under Canada's Export and Import Permits Act.

The exportation, re-exportation, transfer, sale or supply, directly or indirectly, of any Salesforce products, services or technology (including technical data) to any of these territories is strictly prohibited without prior authorization by the U.S. Government and explicit approval by Salesforce.

Please note that additional restrictions may apply to use of Salesforce products, services, or technology under the EAR or other applicable regulations. Please see our Trust website for information regarding use in Russia.

Salesforce products, services, and technology may not be exported to, re-exported to, transferred to, or used by any restricted person or entity, including those parties listed on the U.S. Office of Foreign Assets Control list of Specially Designated Nationals (“SDN List”) - or owned 50% or more in aggregate by one or more parties on the SDN List - the U.S. Bureau of Industry and Security’s Denied Persons List or Entity List, or similar denied parties list without prior authorization by the U.S. Government or other applicable government authority, and explicit approval by Salesforce.

Salesforce products, services, and technology may not be exported, re-exported, or transferred if for use directly or indirectly in any prohibited activity described in Part 744 of the U.S. Export Administration Regulations, including certain military, military intelligence, nuclear, chemical or biological weapons, rocket systems or unmanned air vehicle end-uses, or end-use prohibited under other applicable sanctions or export control law.

We include for your reference the Salesforce Export Control Classification List. It is a list of our products and features with respective Export Control Classification Numbers (ECCNs) and eligible license exception information, per the United States Department of Commerce, Bureau of Industry and Security, Export Administration Regulations. Salesforce does not publish Export Control Classification Numbers or EAR99 designations for software delivered only as a service ("SaaS"), in accordance with the treatment of SaaS under the current Export Administration Regulations. Some Salesforce products may be eligible for consideration as “published software,” as defined in 15 CFR 734.7 of the Export Administration Regulations.

All information on this matrix is strictly a recommendation to the user and should be used in conjunction with the Export Administration Regulations when classifying Salesforce products and services for export purposes. Salesforce makes no representation or warranty as to the accuracy or reliability of the classifications listed in this export compliance matrix. Any use of such classifications by the user, is without recourse to Salesforce and is at the users’ own risk. You are responsible for ensuring that use of the software is in compliance with the U.S. Export Administration Regulations and other applicable export control regulations. Salesforce is in no way responsible for any damages whether direct, consequential, incidental, or otherwise, suffered by the user as a result of using or relying upon such classifications, for any purpose whatsoever.

Regardless of classification, Salesforce products, services, and technology are not to be used - directly or indirectly - in the prohibited territories, described above.

Last updated May 2024

Download complete export compliance list

Questions? Get in Touch.

Ask about Salesforce products, pricing, implementation, or anything else. Our highly trained reps are standing by, ready to help.