Compliance status
HIPAA Compliance
BAA offered: True
StatusConditional
SOC 2 Compliance
Based on public disclosures & vendor documentation.
StatusYes
Compliance Summary & Evidence
Salesforce offers a robust security framework and achieves SOC 2 compliance, but HIPAA compliance is conditional, requiring specific configurations and higher-tier enterprise plans along with a signed Business Associate Agreement.