Security & reliability matter. Actually, they’re critical.
Until recently, formal certification of information security technology was a long and costly necessity of doing business.
No longer. Salesforce can handle these costs at a larger scale, which lower costs relative to on-premise technology.
Below is a summary of the rigorous audits performed and formal certifications that Salesforce has been awarded.
Third-Party Audits
Scrutiny by trusted third-party auditors yields formal assurance in the form of third-party certifications:
- SAS 70 type II – is an independent 3rd party audit of internal controls and data security controls.
- SYSTrust Certificate – is an independent evaluation measuring a service provider against four essential principles: availability, security, integrity, and maintainability.
- ISO 270001 – international standard of information security best practice providing comprehensive best-practice advice and on how to design, implement and maintain a compliant information security management system.
Customer Audits
Salesforce.com operations receive routine scrutiny from customers. Once example is the demanding security audit that ING Bank completed before selecting Salesforce. ING Bank is now one of Salesforce’s largest financial services clients.
Still not convinced?
An overview of Force.com security can be found here, or watch the “Introduction to Force.com Security” webinar (originally recorded on October 9th, 2009).
We’d love to hear from you, so contact us to discuss any Salesforce/Force.com security questions you may have.


Blog