We’re thrilled to announce that MuleSoft has officially achieved ISMAP (Information System Security Management and Assessment Program) certification – a significant milestone that reinforces our unwavering commitment to data security and compliance excellence.
ISMAP overview
ISMAP is Japan’s official government framework for evaluating cloud service security, setting the security bar that cloud providers must clear to be listed on the ISMAP Cloud Service List – a prerequisite for any cloud service used by Japanese government agencies. MuleSoft has met that bar, and we are proud to be officially listed.
Regulatory compliance
This certification is a direct demonstration of MuleSoft’s compliance with Japanese government cloud security standards. The ISMAP framework aligns with internationally recognized standards, including ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27018, and ISO/IEC 27017. Additionally, it incorporates Japan-specific government security guidelines, ensuring our services meet the stringent expectations required for public sector adoption in Japan.
Data protection
The ISMAP certification covers the full scope of sensitive public sector information: citizen personal information, confidential administrative records, and any data processed within Japanese government cloud environments – ensuring comprehensive security controls are in place throughout the entire data lifecycle.
Our platform undergoes continuous audits and compliance monitoring as part of ISMAP’s rigorous assessment requirements, ensuring your compliance posture remains robust. This certification spans our MuleSoft on Hyperforce architecture, with full coverage for the Japan Region, including data residency guarantees that ensure your data stays within Japan, for customers with strong ISMAP compliance needs.
Value to our customers
MuleSoft is now fully positioned to serve Japanese government ministries and agencies, prefectural and municipal governments, public sector organizations, regulated industries including financial services and healthcare, and Japanese enterprises seeking government-approved cloud solutions — all with the security and compliance confidence you deserve.
What this means for you
While the launch of our Japan Hyperforce region in December 2024 provided the scalable, secure foundation necessary for digital transformation, this new certification provides the official government-level validation required for public sector agencies and highly regulated industries to fully leverage that infrastructure.
Whether you’re a Japanese government ministry, a prefectural or municipal agency, a regulated enterprise in financial services or healthcare, or a business seeking government-approved cloud solutions, MuleSoft is now your certified integration partner. This certification signals one thing loud and clear: security and compliance are foundational to us.
Our commitment to trust
At MuleSoft and Salesforce, trust is our number one value. Achieving ISMAP certification is a key step in our journey to deliver the most secure and reliable integration, API management and agent governance platform on the planet. Whether you’re a startup entering the healthcare market or a global enterprise streamlining your compliance program, we are here to help you connect your data, AI agents, and your customers with total confidence.
Visit our Trust Site to explore our full list of certifications and see exactly how we’re keeping your data secure.




