When you land on a login page, your first question is natural: is carta.my.salesforce.com safe? This isn't a standalone website — it's a subdomain of salesforce.com, the global CRM giant. That alone provides a strong foundation of trust. The page is a dedicated login portal for Carta, a company that uses Salesforce to manage customer accounts.
From a technical standpoint, the security is top-notch. The connection uses modern encryption, the site enforces HTTPS, and it sets multiple browser protections to prevent attacks like clickjacking. These are the same standards you'd expect from any major SaaS platform. The domain also has DNSSEC enabled and a clean record on blacklists and Google Web Risk.
Because this is a subdomain, you won't find separate legal pages or contact info here — those live on the main Salesforce site. That's normal and not a red flag. The important thing is that you're logging into a system backed by Salesforce's infrastructure. For Carta customers, this is the correct place to log in. If you're unsure, bookmark the official Salesforce login URL, but based on the evidence, this page is legitimate and trustworthy.