MuleSoft has successfully completed the assessment for Protected B compliance in the new MuleSoft Hyperforce region that was launched in December 2024. This is a major step forward for our customers in the public sector and regulated industries, ensuring that the Anypoint Platform now meets the rigorous security standards required by the government of Canada for sensitive information. Here’s a look at how we achieved this milestone and why it opens up new possibilities for Canadian organizations.
Protected B overview
Protected B, often called FedRAMP for Canada, is Canada’s government-defined security classification standard for sensitive government information. The standard is administered by the Canadian Centre for Cyber Security (CCCS) and sets the bar that cloud service providers must clear before they can be used to host data classified at the Protected B level. MuleSoft has met that bar, and we are proud to now hold this certification.
Regulatory compliance
This certification is a direct demonstration of MuleSoft’s compliance with the Government of Canada’s Security Control Profile for Cloud-Based GC IT Services for Protected B, Medium Integrity and Medium Availability (PBMM). The Protected B framework aligns with internationally recognized standards including ISO/IEC 27001 and FedRAMP while incorporating Canada-specific government security requirements, ensuring our services meet the stringent expectations required for public sector adoption across Canada.
Data protection
The Protected B certification covers the full scope of sensitive government information, including citizen personal data, confidential administrative records, and any data processed within Canadian government cloud environments – ensuring comprehensive security controls are in place throughout the entire data lifecycle.
Our platform undergoes rigorous assessment by an independent third-party assessor (3PAO) and ongoing oversight by the CCCS as part of the certification’s requirements. This certification spans MuleSoft Services on Hyperforce, with full coverage for the Canada Region, including data residency guarantees that ensure your data stays within Canada.
Value to our customers
MuleSoft is now fully positioned to serve Canadian federal government departments and agencies, provincial and municipal governments, public sector organizations, regulated industries including financial services and healthcare, and Canadian enterprises seeking government-approved cloud solutions – all with the security and compliance confidence you deserve. This certification was a major deal blocker for Canadian public sector and FinServ customers, and that blocker is now fully removed.
What this means for you
Achieving Protected B certification is the official government-level validation required for public sector agencies and highly regulated industries to fully leverage MuleSoft’s Canada Hyperforce infrastructure. Whether you’re a federal government ministry, a provincial or municipal agency, a regulated enterprise in financial services or healthcare, or a business seeking government-approved cloud solutions, MuleSoft is now your certified integration partner. This certification signals how important and foundational security and compliance are to us.
Our commitment to trust
At MuleSoft and Salesforce, trust is our number one value. Achieving Protected B certification is a key step in our journey to deliver the most secure and reliable integration, API management, and agent governance platform on the planet. Whether you’re a startup navigating Canadian compliance requirements or a global enterprise streamlining your regulatory program, we are here to help you connect your data, AI agents, and your customers, with total confidence.
Visit our Trust Site to explore our full list of certifications and see exactly how we’re keeping your data secure.
