Shield Platform Encryption versus Classic Encryption for client data
Key Takeaway
For client data in Agentforce Financial Services, recommend Shield Platform Encryption, because Classic Encryption isn't supported. Encryption protects data at rest, but it doesn't control who can see that data.
Salesforce has two ways to encrypt sensitive data such as confidential client information. Classic Encryption comes with the base user license. Shield Platform Encryption is a paid add-on that encrypts a much broader range of data at rest. For Agentforce Financial Services, you need to know four things: which option is supported, which Shield Platform Encryption path fits the firm, which key option meets its key requirements, and what encryption doesn't do.
What Agentforce Financial Services supports
Agentforce Financial Services doesn't support Classic Encryption, for example for data masking in components. When a firm needs to encrypt confidential client data, recommend Shield Platform Encryption.
Agentforce Financial Services fully supports Shield Platform Encryption, along with the other Salesforce Shield tools, event monitoring and Field Audit Trail. All Agentforce Financial Services objects and fields are compliant with Shield Platform Encryption, apart from known product limitations.
Shield Platform Encryption encrypts the data you select at rest, which means while it's stored, not just while it travels over a network. Critical platform functionality keeps working while the data is encrypted. Encrypting client data at rest supports a firm's compliance with privacy policies, regulatory requirements, and contractual obligations for handling private data.