Explore the IT Compliance features that help your team manage regulations, policies,
risks, controls, audit evidence, and compliance issues from one Salesforce app. Track regulatory
obligations, author and distribute policies, score and monitor risks, design and test controls,
collect evidence for audits, and log and remediate compliance issues. Use generative AI to draft
policy clauses, summarize risks, and extract requirements from existing documents.
Required Editions
| Available in: Lightning Experience |
| Available in: Enterprise, Performance, and Unlimited
Editions with Agentforce IT Service. |
- Get Started with IT Compliance
Before you set up IT Compliance, learn about the workflows, key terms, personas, record relationships, required licenses, and feature prerequisites that frame how your compliance team operates in Salesforce.
- Regulations and Policies for IT Compliance
Capture the external regulations that your organization must follow, author the internal policies that put those regulations into practice, and map regulation clauses to the policy clauses and controls that enforce them.
- Risk Management
Identify, assess, and mitigate IT threats in a single, unified workspace. Your compliance team can register risks from a curated scenario library, calculate the risk score based on stakeholder evaluations, map mitigating controls and policies, and treat them with predefined action plans. Monitor the organization's risk posture in real time with dashboards, heat maps, and automous background actions.
- Controls Management for IT Compliance
Define the safeguards that enforce your compliance policies and satisfy external regulations. Compliance controls are the practical, testable checks that turn policy intent into measurable protection, mitigate registered risks, and produce the evidence external auditors rely on.
- Evidence Management for IT Compliance
Manage the collection and verification of compliance evidence in a centralized, auditable workspace. Audit teams create evidence requests, subject matter experts fulfill them, reviewers verify the artifacts, and verified evidence is locked for external auditors.
- Issue Management for IT Compliance
Log, track, and resolve compliance gaps that surface from failed control tests, asset misconfigurations, missed policy acknowledgments, or audit findings. Link each issue to the source record, assign an owner, and confirm remediation through an action plan governed by SLA policies.
