---
schema_version: "1"
id: e260f34790dee3b3adfb8fde50b0f05e209b1f315e5062f3cb2c42c730bbfadc
title: Dynamic Data Masking Policies in Data 360
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_dynamic_data_masking_policies.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_dynamic_data_masking_policies.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d9b258e72601b62e41bb58a4b561e17894f3c7ec9781eb54d267c737a2f36ff8
description: Dynamic data masking conceals sensitive data without altering its usability, accuracy, or relationships. It applies to all Data 360 objects and fields, regardless of the access method.
products:
  - Data 360
release: "264"
---
# Dynamic Data Masking Policies in Data 360

Dynamic data masking conceals sensitive data without altering its usability, accuracy, or relationships. It applies to all Data 360 objects and fields, regardless of the access method.

Data 360 protects sensitive data by encrypting it at rest, which prevents unauthorized access even if the database is compromised. With dynamic data masking, authorized users can view the data, but sensitive data is masked to prevent them from seeing it in plaintext.

Masking works together with other security features. First, access policies determine if users can see data. Then, masking policies determine if the user sees the data masked or unmasked. This is also known as dynamic or query-time masking.

Supported masking methods include redaction (with selective redaction), nullification, and rounding of datetime or numeric values for structured data.

- **[Dynamic Masking Types in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_types_of_dynamic_data_masking.htm&release=264.0.0&type=5)**  
    Dynamic data masking policies protect sensitive data by changing or hiding values when you query them. This is done based on user information, roles, or policy rules, but it doesn't change the data itself.
- **[Create a Dynamic Data Masking Policy for Structured Data in Data 360](https://help.salesforce.com/s/articleView?id=data.c360_a_dynamic_data_masking_policy.htm&release=264.0.0&type=5)**  
    Protect sensitive information by restricting data visibility based on user roles and permissions.
- **[Masking Unstructured Data in Data 360 (Beta)](https://help.salesforce.com/s/articleView?id=data.c360_a_unstr_data_masking.htm&release=264.0.0&type=5)**  
    Mask sensitive information in unstructured files, such as PDFs and text documents, so that only authorized users can view it. Masking policies work on sensitive data that’s automatically tagged or identified.
- **[Create a Dynamic Data Masking Policy for Unstructured Data (Beta)](https://help.salesforce.com/s/articleView?id=data.c360_a_create_unstruc_dynamic_data_masking_policy.htm&release=264.0.0&type=5)**  
    Define a masking policy to protect sensitive information in unstructured files such as PDFs and text documents.
- **[Dynamic Data Masking Best Practices](https://help.salesforce.com/s/articleView?id=data.c360_a_dynamic_masking_best_practices.htm&release=264.0.0&type=5)**  
    Here are some best practices for implementing dynamic data masking in Data Cloud.