You are here:
Local Data Protection
The data stored locally on the device is saved in the device’s embedded memory and never on an external memory card.
Mobile platforms don’t generally allow data extraction from a local database. To make the system more secure, Salesforce does provide encryption on the device database.
Feed Database Encryption
Feeds are made up of feed items. A feed item is a piece of information posted by a user (for example, a poll) or by an automated process (for example, when a tracked field is updated on a record).
- Salesforce Mobile App for iOS: Database encrypted via SQLCipher using 256-bit AES (CBC
mode/PBKDF2 key derivation)
Records pertaining to inactive feed item data are evicted from the database after 5 days have elapsed. Temporary files (such as viewed image attachments) are stored only in memory while used.
- Salesforce Mobile App for Android: Database encrypted via SQLCipher using 256-bit AES
(CBC mode/PBKDF2 key derivation)
Records pertaining to inactive feed item data are evicted from the database after 5 days have elapsed. Temporary files (such as viewed image attachments) are stored only in memory while used.
Files and Attachments
A file or attachment is any file that a user uploads, shares, or attaches to posts, comments, or records. All file types are supported: documents, presentations, spreadsheets, PDFs, images, audio files, and video files.
- Salesforce Mobile App for iOS: Files and attachments are stored on the device’s file system in a double-encrypted format. We use the device’s hardware encryption capability to encrypt the files while the device is locked and in addition we perform our own encryption using AES algorithm (128-bit block size and 256-bit key size). When the file is being viewed, there's a temporary unencrypted copy kept on the file system (removed when the 'viewing' operation is complete).
- Salesforce Mobile App for Android: To store files offline, we require the user to enable device encryption and use the operating system’s file encryption system.
Offline Sync
If Salesforce users lose their wireless connection, they can enable offline sync to navigate within the app and view most recent items.
- Salesforce Mobile App for iOS: Database encrypted via SQLCipher using 256-bit AES (CBC mode/PBKDF2 key derivation).
- Salesforce Mobile App for Android: Database encrypted via SQLCipher using 256-bit AES (CBC mode/PBKDF2 key derivation).
