---
schema_version: "1"
id: c0e859e6bad4d0c63a016be13f7224eddb63bf09722754b93f3c4de46e344b1a
title: Encryption
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/sales/264-0-0/activity_capture_encryption.md
canonical_url: https://help.salesforce.com/s/articleView?id=sales.activity_capture_encryption.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d2c1e249e0556743be77a86e089c77aa53bdfded8a8f71eb2d0cc513374d904d
description: In Einstein Activity Capture, encryption means a layered approach to data protection.
products:
  - Sales Cloud
  - Cross Cloud
  - Service Cloud Voice
release: "264"
---
# Encryption

In Einstein Activity Capture, encryption means a layered approach to data protection.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein Activity Capture Standard in Sales in <strong>Starter</strong>, <strong>Pro Suite</strong>, <strong>Professional</strong>, and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with <strong>Unlimited </strong>Edition, <strong>Einstein 1 Sales Edition</strong>, and <strong>Agentforce 1 Edition</strong></td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Einstein for Sales, which is included in <strong>Einstein 1 Sales Edition</strong> and available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Sales Engagement, which is included with Sales in <strong>Performance</strong> and <strong>Unlimited</strong> Editions, and available for an extra cost in <strong>Professional</strong> and <strong>Enterprise</strong> Editions</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available with Revenue Intelligence, which is available for an extra cost in <strong>Enterprise</strong> and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-sales-sales_productivity-264-0-0-production-enus/b2f6c36a-fa61-4a3c-9752-032ce1818a69/images/icon_note.png)

Note We’re reorganizing the Einstein Activity Capture documentation. We’re moving some information around, but we aren’t deleting anything.

Einstein Activity Capture handles encrypted email fields in these ways.

- When you encrypt the Contact Email field, Einstein Activity Capture can’t read the encrypted data. It attempts to sync contacts by using the first matched email field it finds, whether custom or standard.
- When you encrypt the User Email field, Einstein Activity Capture stores an unencrypted copy of user emails in a hidden field for matching.
    
    Data synced to Salesforce main instance, such as email, activity, and contact data, supports [Shield Platform Encryption](https://help.salesforce.com/s/articleView?id=xcloud.security_pe_overview.htm&type=5&language=en_US) and the Bring Your Own Key (BYOK) service.
    
    Shield Platform Encryption isn’t available for captured emails and events. Instead, Salesforce encrypts the data at rest by using AES-256 server-side encryption.

## Shield Platform Encryption

When Shield Platform Encryption is enabled, synced emails and events on the activity timeline show the names of encrypted contacts and leads.

Salesforce uses [Transport Layer Security (TLS) 1.2 or higher](https://help.salesforce.com/s/articleView?id=xcloud.security_overview_infrastructure.htm&type=5&language=en_US) to protect synced events and contacts during transfer. For authorization, Einstein Activity Capture requires that the data connection meets Salesforce TLS security requirements.

Salesforce uses TLS 1.2 or higher and HTTPS to protect data moving between the user’s email account, Salesforce platform servers, and Activity Platform Hyperforce infrastructure servers. Token-based authentication is used to protect transferred data.

Shield Platform Encryption is supported when syncing contacts and events, with some exceptions. For details, see [Considerations for Setting Up Einstein Activity Capture](https://help.salesforce.com/articleView?id=sales.aac_limitations.htm&language=en_US).

If your org uses Shield Platform Encryption, review these considerations for Einstein Activity Capture.

- Einstein Activity Capture encrypts captured data by using its own methods. Shield Platform Encryption doesn’t apply to captured data unless it’s synced to Salesforce records.
- If source data is encrypted, related Einstein Activity Capture data can appear masked. For example, if you encrypt contact names, they appear masked on the activity timeline unless the user has permission to view encrypted data.
- If you encrypt the User Email field, Salesforce stores an unencrypted copy of the email address in a hidden field to support record matching. While Shield Platform Encryption doesn’t prevent Einstein Activity Capture from working, Salesforce stores necessary data in plain text to facilitate matching logic.