What is SalesForce Shield Platform Encryption?
Salesforce Shield Platform Encryption enables enterprises using Salesforce to natively encrypt data at rest across their Salesforce apps without compromising business functionality. Thales Vormetric offerings help organizations safely store, manage, and maintain the Salesforce tenant secrets used to derive the encryption keys that protect data within the Salesforce environment, and to meet compliance and best practice requirements for management of these encryption keys. Bring Your Own Key (BYOK) places control of Salesforce encrypted data firmly in the hands of customers by controlling the final form of Salesforce encryption keys.
Compliance mandates, data residency requirements, government regulations and best practices require that enterprises using Salesforce Shield Platform Encryption protect and maintain encryption keys in accordance with specific frameworks and laws. To meet the requirements of these frameworks and laws, enterprises must also meet specific maintenance and storage requirements for tenant secrets as the controlling element for Salesforce encryption keys.