Trust and Compliance Documentation
Understand how Salesforce protects customer data and complies with global standards. Find detailed information on how we prioritize security, privacy, and regulatory adherence.
What's included in the Trust and Compliance Documentation?
The Security, Privacy, and Architecture (“SPARC”), which describes:
• The architecture of the services,
• The security and privacy related audits and certifications received for the services, and
• The administrative, technical and physical controls applicable to these services
Scroll down to Product Documentation for up-to-date SPARC documentation.
The Notices and License Information (“NLI”) which describes the features, restrictions and notices associated with any:
• Information sourced from third parties or public sources and provided to customers via these services
• Functionality that allows customers to interact with social media, other websites, and/or non-Salesforce applications, including licensor terms, and
• Desktop and mobile device software applications provided in connection with these services
Scroll down to Product Documentation for up-to-date NLI documentation.
The Infrastructure & Sub-processors (“I&S”) which:
• Describes the infrastructure environment for the services,
• Lists the sub-processors and certain other entities material to Salesforce's provision of these services, and
• Lists the countries where customer data is stored and processed for these services
The Product Terms Directory (“PTD”) which:
• Sets forth certain terms associated with Services purchased on Order Forms, and
• Organizes terms by the name of the particular Service as it appears on the Order Form.
Updates to the Trust & Compliance Documentation
Updates to the SPARC, NLI, and I&S Documentation are reflected in the Change Log.
For notifications of new sub-processors click here to subscribe.
Updates to the PTD are reflected in the previous versions of PTD accessible directly from the PTD.
For any additional notices required by licensors related to distributed components of the services see the Open Source Notices website.
How to Find Your Trust & Compliance Documentation
To find the SPARC or NLI Documentation applicable to your Services, locate your Service and Infrastructure to find the SPARC and NLI for that Service. Some Services can run on Hyperforce, or alternative infrastructure. To confirm which Infrastructure your organization is running on, see Where is my Salesforce instance located? and View instance information for your Salesforce Organization
.
Some Services run on multiple infrastructures and are subject to more than one set of SPARC or NLI documentation. The Scope or Covered Services section of each SPARC or NLI document sets forth those Services or features that are covered by additional documentation.
All Services share a common I&S document to make it easier to find all of the entities that host or process data for our Services.
To find the PTD Documentation applicable to your Service, locate your Service in the PTD.
Product Documentation
- Archive
- Automotive Cloud
- Backup and Recover
- B2B Commerce on Lightning Experience
- D2C Commerce (formerly B2B2C Commerce)
- Chatter
- Code Builder
- Consumer Goods Cloud (including Trade Promotion Management, Trade Promotion Optimization, and Retail Execution)
- Communications Cloud
- CRM Analytics (formerly Tableau CRM) (including Einstein Discovery and Salesforce Data Pipelines)
- Customer Data Cloud
- Database.com
- DevOps Center
- Discover
- Emergency Program Management
- Employee Productivity (formerly IT Service Center — Agent and Employee Service — Agent)
- Employee Service
- Enablement
- Energy and Utilities Cloud
- Enhanced Messaging
- Experience Cloud (formerly Community Cloud)
- Feedback Management (formerly Salesforce Services)
- Financial Services Cloud (including Digital Lending)
- Flow for Industries (formerly Digital Process Automation) (including Decision Tables, Data Processing Engine, Omnistudio, Business Rules Engine, Client-Side Document Generation, and Server-Side Document Generation)
- Health Cloud
- IoT Explorer (including IoT Plus)
- Intelligent Form Reader
- Lightning Platform (including Force.com and Salesforce Connect)
- Loyalty Management
- Manufacturing Cloud
- Media Cloud
- Messaging
- Messaging for In-App and Web
- Net Zero Cloud (formerly Sustainability Cloud)
- Privacy Center
- Public Sector Solutions
- Referral Marketing
- Retail Cloud POS
- Revenue Cloud Advanced (formerly Revenue Lifecycle Management)
- Revenue Cloud Billing
- Safety Cloud
- Sales Cloud
- Salesforce Backup (formerly Backup and Restore)
- Service Cloud (including Salesforce Field Service managed package)
- Salesforce Contracts
- Salesforce CPQ and Salesforce Billing
- Salesforce Maps (including Maps Lite)
- Salesforce Order Management
- Salesforce Sales Planning
- Salesforce Shield
- Salesforce Spiff (US-based instances provisioned or migrated on or after January 30, 2025; EU-based instances provisioned or migrated on or after February 18, 2025))
- Salesforce Web3 Services (including Web3 Connect and NFT Management)
- Service Cloud
- Service Cloud Voice
- Shift Management
- Subscription Management
- Site.com
- Tableau Einstein
- Vlocity managed packages and features (“Vlocity Services”) branded as:
- Vlocity Communication package,
- Vlocity Media and Entertainment package,
- Vlocity Energy & Utilities package,
- Vlocity Insurance package,
- Vlocity Health package,
- Vlocity Public Sector or Vlocity Government package,
- Vlocity Digital Commerce Gateway, and
- Vlocity Order Management Plus
- WDC
- Workforce Engagement Management
- the Salesforce.org services branded as:
- Accounting Subledger
- Admissions Connect
- Education Cloud
- foundationConnect (provisioned on or after August 19, 2019)
- Grants Management
- Nonprofit Cloud
- Nonprofit Cloud Case Management
- Nonprofit Cloud for Grantmaking
- Salesforce.org Insights Platform: Data Integrity
- Student Success Hub (including the former Salesforce Advisor Link)
Trust & Compliance Documentation
SPARC (2025-05-13)
NLI (excluding Messaging and Enhanced Messaging) (2025-06-17)
Enhanced Messaging, LiveMessage and Messaging NLI (2024-10-15)
Trust & Compliance Documentation for Hyperforce (formerly Salesforce Unified Cloud)
SPARC (2025-06-17)
NLI (2025-06-17)
- The service and features branded as “Agentforce” including:
- Agentforce Employee Agent
- Agentforce SDR
- Agentforce Sales Coach
- Agentforce Service Agent
- Einstein Bots
- Einstein Conversation Insights
- Einstein Conversation Mining
- Einstein Copy Insights
- Einstein for Field Service
- Einstein GPT for Commerce
- Einstein GPT for Sales
- Einstein GPT for Service
- Einstein for Platform
- Einstein Prediction Builder
- Einstein for Sales
- Einstein for Service
- Einstein Vision and Language
- Einstein Vision for Social Studio
- Sales Engagement (formerly High Velocity Sales)
- Einstein for Marketing Cloud Account Engagement (formerly Pardot Einstein)
- Sales Cloud Einstein
- Salesforce Inbox
- Service Cloud Einstein
- The Einstein Features
- Activity Capture
- Article Recommendations
- Bots
- Case Classification
- Case Wrap-up
- Deal Insights
- Intelligent Forecasting Machine Learning
- Object Detection
- Opportunity Scoring
- Prediction Builder
- Recommendation Builder
- Reply Recommendation
Trust & Compliance Documentation
SPARC (2025-06-17)
NLI (2025-05-13)
Trust & Compliance Documentation
Government Cloud Plus SPARC (2024-05-16)
Government Cloud Defense SPARC (2023-05-05)
Trust & Compliance Documentation
SPARC (2024-02-13)
Enhanced Messaging, LiveMessage and Messaging NLI (2024-10-15)
Sales Enablement (formerly branded as myTrailhead) NLI (2023-05-05)
Quip NLI (2023-05-05)
Salesforce.org NLI (2024-02-13)
- Advertising Studio (including Advertising
- Audiences and Journey Builder Advertising)
- Evergage
- Marketing Cloud Engagement (formerly ExactTarget) (including Email Studio, Journey Builder and Mobile Studio)
- Intelligence (including Intelligence Data Pipelines) (formerly Datorama)
- Intelligence Reports for Engagement (formerly Datorama Reports)
- Interaction Studio (legacy)
- Marketing Cloud Growth Edition and Marketing Cloud Advanced Edition
- Marketing Cloud Personalization (formerly Interaction Studio)
- Marketing Cloud Einstein services branded as:
- Behavioral Triggers
- Einstein Content Selection
- Einstein Content Tagging
- Einstein Copy Insights
- Einstein Email Recommendations
- Einstein Engagement Frequency
- Einstein Engagement Frequency for Account Engagement
- Einstein Engagement Scoring for Email (formerly branded as Predictive Scoring)
- Einstein Engagement Scoring for Mobile
- Einstein Messaging Insights
- Einstein Recommendations
- Einstein Send Time Optimization for Marketing Cloud
- Einstein Send Time Optimization for Account Engagement
- Personalization Builder
- Predictive Email
- Predictive Intelligence
- Predictive Web
- Web Personalization
- Marketing Cloud Engagement for Nonprofits
- Unified Messaging
- Social Studio
Trust & Compliance Documentation
SPARC (2025-06-17)
NLI (2025-06-17)
Trust & Compliance Documentation for Hyperforce (formerly Salesforce Unified Cloud)
SPARC (2025-06-17)
NLI (2025-06-17)
Salesforce I&S (2025-06-23)
Questions? Get in Touch.
Ask about Salesforce products, pricing, implementation, or anything else. Our highly trained reps are standing by, ready to help.