Salesforce Guardian

·Salesforce Guardian

·Our Unified Security Framework

·Foundationals, Configurables, and Enhanceables

·Our commitment to securing and protecting your data comes to life by delivering innovative solutions, expert guidance, and reliable access to data and systems to our customers. Read the guide Explore the layers

·Trust is Our #1 Value

·At Salesforce, trust isn't a feature - it's our highest value. Every product decision, every line of code, and every compliance certificate starts with a single question: does this keep our customers safe?

·When you use Salesforce, you're not just getting a CRM - you're getting a platform built from the ground up with security embedded into every decision we make. Learn More

·Foundationals

·Built-in, 24/7 security

·Configurables

·Customer-controlled settings

·Enhanceables

·Advanced data protection

·Protecting Data is a Partnership

·Salesforce operates using a shared responsibility model. We provide the foundational security built into our platform and infrastructure, while you ensure that the security controls within Salesforce are configured correctly.

·Salesforce's Responsibility

• ·Build innovative and secure solutions Prepare customers for evolving threats Deliver reliable access to systems Meet compliance standards for customers

·Customers' Responsibility

• ·Implement security controls Control user permissions and access
• ·Configure settings using security best practices Ensure data integrity and resilience

·Our Security Framework

·Each layer is a visual card - click to expand and explore product capabilities, Salesforce security features, and solutions for meeting your regulatory and policy obligations.

·Foundationals

·Configurables

·Enhanceables

·Foundationals - Layer 01 of 03

·The Foundation of Trust

·Built-in always-on protections Salesforce builds and maintains on every customer's behalf. Always working in the background - no setup needed.

·Secure Development

·SDL practices baked into every release: threat modeling, security reviews, and scanning on all platform code. Learn More

·Hyperforce

·Next-gen public cloud infrastructure with built-in compliance, agility, and data residency controls. Learn More

·Encryption

·All data encrypted at rest and TLS 1.2+ in transit. Fully automatic platform-wide. No keys to manage. Learn More

·Host, Storage & Network Security

·Global data centers with biometric access, 24/7 security, network segmentation, DDoS defense and redundancy. Learn More

·Third Party Auditing & Testing

Schedule DScheduled pen testing, continuous vulnerability scanning, and an independent bug bounty program. Learn More

·Least Privilege Access

·Internal access to customer data is least-privilege, need-based, time-limited, logged, and regularly reviewed. Learn More

·Site Reliability & Disaster Recovery

·Multi-region redundancy, automated failover, and 99.9%+ uptime SLAs with rapid recovery. Learn More

·24/7 Global Monitoring

·Continuous threat and incident monitoring by a global team with real-time alerting and response. Learn More

·Compliance & Certifications

·SOC 2 Type II, ISO, PCI DSS L1, HIPAA-eligible, FedRAMP Authorized, and Japan CS Gold. Learn More

·Government Cloud

·FedRAMP-authorized Government Cloud for public sector, meeting FISMA, ITAR, and DoD IL2/4 requirements. Learn More

·Foundationals are maintained entirely by Salesforce - you benefit from all of these without any configuration work. Configurables - Layer 02 of 03

·Managing Your Security Settings

·Built-in controls your admins configure to meet security requirements and best practices. Available to all Salesforce customers - but require deliberate setup by you.

·Multi-Factor Authentication

·Enforce MFA for all users via Salesforce Authenticator, TOTP apps, or hardware security keys. Learn More

·IP Restrictions

·Restrict IP ranges for profiles to ensure only trusted users can access Salesforce. Learn More

·User Access Controls

·Limit access at the object, field, and record level via profiles, roles, and permission sets. Learn More

·Auditing

·Built-in audit capabilities including Setup Audit Trail, Login History, and Field History Tracking. Review configuration changes, login activity, and data modifications to detect unauthorized actions. Learn More

·Health Check

·Security Health Check scores your org against a baseline and flags gaps with remediation guidance. Learn More

·Permission Sets

·Granular permission sets extend access without changing profiles, and groups for role-based access at scale. Learn More

·Login History Reports

·Track logins, failures, source IPs, and browser types to identify anomalous patterns and suspicious access. Learn More

·Single Sign-On (SSO)

·Integrate with Okta, Azure AD, Ping, or any SAML 2.0/OAuth 2.0 provider to unify identities into one profile. Learn More Enhanceables - Layer 03 of 03

·Advanced Controls

PartPart of Salesforce Guardian, these premium add-ons are built for organizations navigating strict regulations or sophisticated threats. They are available individually or as a complete bundle.

·Salesforce Shield

·Flagship security suite combining Event Monitoring, Platform Encryption, Audit Trail, and Data Detect in one bundle. Learn More

·Shield: Platform Encryption

·Secure data at the field and database levels with AES-256 encryption and flexible key management options. Learn More

·Shield: Event Monitoring

·Track 90+ event types and use custom policies to automatically block risky user actions in real time. Learn More

·Shield: Field Audit Trail

·Audit who, what, and when data changes. Retain log of field history changes to comply with regulations. Learn More

·Shield: Data Detect

·Automatically discover sensitive data across your org. Use scan results to apply additional security controls. Learn More

·Security Center

·Centrally manage security health, identify misconfigurations, and investigate threats with Agentforce. Learn More

·Privacy Center

·Streamline data privacy, manage consent policies, and ensure GDPR and CCPA compliance with Agentforce. Learn More

·Data Mask & Seed

·Anonymize sensitive production data and seed test environments with safe data to accelerate development. Learn More

·Backup & Recover

·Automate daily backups of Salesforce data and metadata, get proactive alerts, and easily restore data. Learn More

·Archive

·Relocate historical records via automated policies to boost performance while maintaining data access. Learn More

·Match Your Security Needs to the Right Solutions

·Your security strategy should be driven by your specific business challenges. The following use cases illustrate how Salesforce Guardian can help you address sophisticated risks, protect sensitive data, and maintain compliance.

·A note on the Enhanceables

·Our add-on security and privacy products - collectively called Salesforce Guardian - can be purchased on top of your core license. Here's a glimpse into what our products do. Learn more →

·Ready to take your security to the next level?

·Take the next step to explore our solutions, learn security best practices, or connect with our team. Get started Stay up to date