Salesforce.com, Inc.

This trustmark signifies adherence to the EU Cloud CoC through a dedicated framework and legally demonstrates GDPR compliance. Cloud Service Providers that have successfully passed the EU Cloud CoC’s evaluation process have their Compliance Mark visible in both the Code’s Public Registry as well as here in the CSA STAR Registry.

Offers an industry-accepted way to document what security controls exist in IaaS, PaaS, and SaaS services. It provides a set of Yes/No/NA questions and space to justify the response a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Cloud Controls Matrix (CCM).

Offers an industry-accepted way to document what security controls exist in solutions that include AI components or are AI products. It provides a set of Yes/No questions a cloud consumer and cloud auditor may wish to ask of a cloud provider to ascertain their compliance to the Artificial Intelligence Controls Matrix (AICM).

Organizations who have the CSA Trusted Cloud Provider trustmark demonstrate a commitment to organizational security. They are a CSA Corporate Member, volunteer regularly for CSA, and have at least one staff member who has earned their CCSK.