Tableau

Data it handles: Customer visualization data, connected data-source credentials, and end-user account data hosted on Salesforce Hyperforce. This is the product covered by essentially all certifications above (SOC 2, ISO 27001/27017/27018/42001, HIPAA, PCI DSS, TISAX, C5, Cyber Essentials).

Primary SaaS SKU and the one carrying the full compliance stack; these certifications do not extend to Tableau Server or Desktop.

Data it handles: Runs entirely on customer-managed infrastructure (on-prem or customer cloud account); data never leaves the customer's environment unless they choose to send it out.

Security/compliance posture (encryption, access control, patching) is the customer's own responsibility, not covered by Tableau Cloud's SOC 2/ISO certificates.

Data it handles: Local application; connects to on-prem or cloud data sources chosen by the user.

No SaaS-side data custody; compliance posture depends on where the user publishes/connects, not on Tableau Cloud's certifications.

Data it handles: Published workbooks and underlying data are publicly visible by design.

Not intended for sensitive or confidential data; distinct free tier with a separate terms of use from Tableau Cloud.

Data it handles: Natural-language queries and underlying workbook data processed through the Agentforce Trust Layer and third-party LLMs under zero-retention agreements.

Admin-controlled opt-in per user group or site; not used to train foundation models per vendor documentation.

Data it handles: Built on Data Cloud and Agentforce Services rather than the classic Tableau Cloud stack.

Separately named in the same ISO 27001/27017/27018/42001 certificates as Tableau Cloud, and is the product line that achieved FedRAMP High alongside Agentforce.

Data it handles: Isolated government community cloud boundary for federal/state customers.

The distinct SKU that carries FedRAMP Moderate authorization (since 2021); the standard commercial Tableau Cloud product does not itself hold FedRAMP.