Reduce friction in the encryption process with Database Encryption, now generally available in all regions. Bring Your Own Key for Data 360 opens more root key management options.
- Encrypt Your Entire Database (GA Release)
Database Encryption is generally available worldwide. It began its deployment in Winter '26. Due to the pace of the controlled release, some regions lagged in enabling the new feature. Database Encryption allows you to sort, filter and reference encrypted data without functional or performance tradeoffs. You can still apply Field Level Encryption to individual fields if required. - Bring Your Own Key to Data 360
Platform Encryption for Data 360 customers can now make use of the Bring Your Own Key (BYOK) feature of Shield Platform Encryption. When you supply your own root key, you get the benefits built into Salesforce Shield Platform Encryption, plus the extra assurance that comes from exclusively managing your own key material. For Data 360, BYOK supports root keys only. Data 360 then manages all DEK creation and wrapping using the root key. To be compatible with Salesforce BYOK, use a PKCS#8 encrypted, Base64 encoded 4096 RSA key pair with appropriate headers and footers. - Encrypt Newly Supported Fields with Shield Platform Encryption
You can now encrypt the Comments field on these objects: Business Operations Process Participant, Compliance Control Participant, Compliance Policy Participant, Validation Procedure Participant, Financial Account Participant, and Regulation Participant. On the Case object, you can encrypt the Rich Text Area for Case Description field. On the Provider Activity Goal Limit object, you can encrypt the Source System Identifier field.