Shield Platform Encryption for data at rest
Key Takeaway
Shield Platform Encryption encrypts stored data with keys that your company controls, but it is not access control. Field-level security, page layout settings and sharing rules still decide who sees what.
Shield Platform Encryption encrypts sensitive Salesforce data at rest, using keys that your company controls. A company uses Shield Platform Encryption to show compliance with regulatory and industry requirements and to prove it meets contractual duties for protecting private data in the cloud.
What encryption at rest covers
Shield Platform Encryption protects data at rest with AES 256-bit encryption. Your company decides what to encrypt and how in an encryption policy, which is its plan for encrypting data.
On Hyperforce, data at rest already has volume-level encryption by default. Volume-level encryption protects all the data on a disk with one key, which Salesforce owns and manages. Shield Platform Encryption runs in parallel with volume-level encryption, adding unique keys that you control and manage.