Data Security Compliance

GoldFinch ERP is a 100% native Salesforce application. All data is stored, secured, and governed by Salesforce’s platform infrastructure. This means compliance with major security and data protection standards is managed directly by Salesforce.

For detailed information, customers can reference Salesforce’s official compliance documentation:

• HIPAA: Health Insurance Portability and Accountability Act

  • https://compliance.salesforce.com/en/hipaa

• PCI DSS: Payment Card Industry Data Security Standards

  • https://compliance.salesforce.com/en/pci-dss

• SOC 2: System and Organization Controls 2 criteria for managing customer data

  • https://compliance.salesforce.com/en/soc-2

• ISO27001: Information security management

  • https://compliance.salesforce.com/en/iso-27001

Since GoldFinch runs entirely on Salesforce, customers benefit from Salesforce’s global infrastructure, trusted security framework, and robust compliance standards to meet data protection and regulatory requirements.

Article Data-Security-Compliance  ·  Last updated September 24, 2025 · GoldFinch ERP Help Center