---
schema_version: "1"
id: 607cccfe0d01f4b9a4975c17b38b2ba3bd3fa1e831cf9749d6ecf2b08b5fcce0
title: Managing Your Salesforce Foundations Compliance
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/base_manage_your_compliance.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.base_manage_your_compliance.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 69156ec46b97f91c9507b259fecbd663b80f5f467eddb111681e0c14acf6d6fc
description: If you’re using Salesforce Foundations, you’re responsible for your Health Insurance Portability and Accountability Act (HIPAA) compliance. Manage your compliance by enabling only HIPAA-ready Salesforce features and implementing them securely.
products:
  - Cross Cloud
release: "264"
---
# Managing Your Salesforce Foundations Compliance

If you’re using Salesforce Foundations, you’re responsible for your Health Insurance Portability and Accountability Act (HIPAA) compliance. Manage your compliance by enabling only HIPAA-ready Salesforce features and implementing them securely.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <a href="https://help.salesforce.com/s/articleView?id=xcloud.base_editions.htm&amp;release=264.0.0&amp;type=5" title="Salesforce Foundations is included in supported editions of select Salesforce Clouds. This topic provides information about the editions and Clouds that support Foundations.">View supported editions.</a></td></tr></tbody></table>

These features offered in Salesforce Foundations aren’t covered by the Business Associate Addendum (BAA): Einstein Activity Capture, Salesforce Inbox, and Einstein Send Time Optimization (STO). These features must remain disabled for the purposes of HIPAA compliance. You can confirm and update the status of these features in Setup.

## Salesforce Foundations and Agentforce

While Agentforce is built on a HIPAA-compliant base, you must configure agents with security in mind in order to maintain compliance. For more about building agents that meet your individual security requirements, see the [Agentforce documentation](https://help.salesforce.com/s/articleView?id=ai.copilot_intro.htm&language=en_US).

#### See Also

- [Salesforce Trust](https://trust.salesforce.com)
- [_Salesforce:_ Business Associate Addendum Restrictions](https://www.salesforce.com/company/legal/business-associate-addendum-restrictions)
- [_Salesforce Compliance:_ HIPAA](https://compliance.salesforce.com/en/hipaa)