Compliance
Everything we have published on compliance.
Salesforce Is Sending CA/ECA Non-Compliance Notices. Read Yours Before You Lock Anything
Salesforce is issuing CA/ECA non-compliance notices ahead of a June 25 deadline. Here's how to find the flagged app and protect your listing before enforcement begins.
Mandatory Security Requirements for Connected Apps and External Client Apps Required by May 11, 2026
Salesforce has set a firm May 11, 2026 deadline for four mandatory security controls on Connected Apps and External Client Apps. Here's what AppExchange partners actually need to ship, and what comes after.
Aquiva Key: Unlocking Simple and Secure API Monitoring for Salesforce
Jakub Stefaniak explains why Salesforce API monitoring matters, what to watch for, and how to spot suspicious connected app behavior early.
AppExchange Partners: Salesforce Now Expects You to Monitor API Usage
Salesforce's Q4 2025 security advisory puts AppExchange partners' API activity in scope. What to monitor in your Partner Business Org and Packaging Org, and why.
Salesforce Security Starts with API Usage Monitoring
It’s Monday, 08:12. Your inbox says: “API usage reached 85% of your daily limit.” On Saturday. Nobody was supposed to be working. You open Salesforce to piece it together and hit a wall. The standard logs show only the last day. Saturday has already fallen off the edge. No reply. No trail. Just an alert...
The Agentic Enterprise: Building Trust, Not Just Capability
Based on our Dreamforce panel: AI, Unpacked: Real-world Guidance for Every Stage. Every technology wave promises reinvention. Few deliver it. The agentic enterprise may prove an exception – not because of its novelty, but because it redefines what work itself means. Marc Benioff called AI agents “the beginning of an unlimited workforce.” That framing captures...
Guardrails for Generative AI: Why Variables and Filters Matter in Agentforce
Generative AI has a reliability problem. It is powerful, but unpredictable. Ask the same question twice and you may get two very different answers. In a consumer setting, that unpredictability might be tolerable. In an enterprise setting, where compliance, security, and customer trust are at stake, it becomes a liability. The stakes are real. United...
Salesforce Einstein Trust Layer: AI Security & Compliance in 2026
Learn how Salesforce’s Einstein Trust Layer ensures AI security compliance with data masking, zero data retention, and auditability.
Aquiva Labs Renews SOC 2 Compliance: Elevating Trust with Security and Confidentiality
We are delighted to announce that Aquiva Labs has renewed SOC 2 Type 2 compliance – a significant milestone that underscores our unwavering dedication to safeguarding data security and confidentiality. This achievement reflects the successful implementation and operational effectiveness of our controls over an extended evaluation period. What’s New with SOC 2 Type 2 Compliance?...
Aquiva Labs Achieves SOC 2 Compliance
We are thrilled to announce that Aquiva Labs has achieved SOC 2 compliance. This significant accomplishment demonstrates our commitment to maintaining robust data security standards. What This Means for Our Stakeholders Enhanced Customer Confidence Trust and Assurance: SOC 2 certification assures our customers that their data is handled with the highest level of security and...
Subcontractor Risk Management & Supply Chain Security 2025
Learn how to reduce supply chain security risks through subcontractor risk management and compliance best practices to secure your digital supply chain.
Adapting to a Changing World: Why Supplier Risk Management Is Crucial for Success
In this Risk Management article, we’ll take a look at what Supplier Risk Management is, why it’s so important, and how to comprehensively assess your business's risks. We’ll also share how Aquiva Labs evaluates partners and platforms we rely on, as well as steps we proactively take to ensure that we are a responsible strategic development supplier to partner with.
