Data Encryption

Automate the Salesforce Shield Platform Encryption Process

Craig Probus
Director of Product
February 9, 2020

RevCult is now OwnBackup Secure! In 2021, OwnBackup acquired RevCult, enhancing the cloud data protection platform with proactive data security. With OwnBackup Secure, you will strengthen security posture by understanding data exposure risks and proactively taking action to protect and secure your data—all within Salesforce.

Salesforce Shield Platform Encryption is a popular solution for many of our clients in highly secure industries concerned about data encryption and security (i.e. healthcare and financial services). Although Salesforce Shield is a very helpful tool that can greatly increase the security of any customer’s Salesforce data, it comes with its limitations and challenges just like any solution.

The challenges

After helping many clients implement Salesforce Shield Platform Encryption over the years, we began to see the same challenges over and over. This is mostly due to the exhaustive set of rules within Salesforce Shield regarding which fields can and cannot be encrypted. It’s difficult to easily see:

  1. Which fields are already encrypted by Salesforce Shield
  2. Which fields can be encrypted
  3. Which fields could be encrypted, but require mitigation before encrypting
  4. Which fields could negatively impact the organization if encrypted (such as fields that are referenced in report filters or list views)

Over time, we developed internal checklists and guides to make this process less painful for our clients, but it still required a lot of manual effort and time. The manual process can also result in human error that may not be apparent until after encryption, causing major negative effects across the business.

Looking for a better solution

We knew there had to be a better solution for these challenges but didn’t find anything on the market. We saw this as a great opportunity to put our talented developers and business technologists to work on a repeatable and scalable solution. We held an internal hackathon with the goal of creating a Salesforce app that solved these Salesforce Shield deployment pain points.

The result of this effort was incredible. Our team figured out a way to use the internal Salesforce APIs to automatically determine which fields can be encrypted and why some can’t based on Salesforce Shield’s rule set. The app immediately proved valuable as we began using it with our Shield implementations.

OwnBackup Secure for Shield

The app has become a very streamlined way to enable a conversation around data classification and then easily compare what you want to encrypt vs what you actually can encrypt. OwnBackup Secure for Shield provides a central viewpoint that shows you the fields that are already encrypted, fields that are ready for encryption, fields that require mitigation before being ready for encryption and fields that might negatively impact your organization if encrypted. For those fields that aren’t ready for encryption Secure for Shield shows you what needs to be fixed for it to be encrypted.

You also have the ability to download a report of the current state of your instance including what fields are already encrypted. You can run the tool as often as you need and provide the output to your security team to show what fields are fully protected at the database level.

Secure for Shield provides ongoing assurance that you’re secure and completely up to date with the latest rules for Salesforce Shield. For every Salesforce release, there’s a release of Secure for Shield with the latest rule set. You can then run Secure for Shield to quickly see which fields can be encrypted with the new release.

Overall, we are seeing tremendous results from clients that leverage Secure for Shield with Salesforce Shield Platform Encryption. It has saved up to four months of implementation time and 80% reduction of ongoing maintenance of Salesforce Shield Platform Encryption. We’re very proud of this new app and we can’t wait to see more people use it to save time and become more secure.

Interested in learning more? Request a free Guided Risk Assessment for Salesforce today, or schedule a demo below.

Get started

Submit your details and we will contact you shortly to schedule a custom 25-minute demo.
You may also like

Get started

Share your details and we’ll contact you shortly to schedule a custom 25-minute demo.
Schedule a Demo
magnifiercrossmenuchevron-downchevron-right linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram
Copy link
Powered by Social Snap