Loading
Prepare for Email to Become the Default Login ExperienceRead More
Set Up and Maintain Your Salesforce Organization
Salesforce Apps That Don’t Support Shield Platform Encryption

You are here:

  1. Salesforce Help
  2. Docs
  3. Set Up and Maintain Your Salesforce Organization

Salesforce Apps That Don’t Support Shield Platform Encryption

Many Salesforce features work as expected when you work with data that’s encrypted with Shield Platform Encryption. Others don’t. When you apply field-level encryption (FLE) and Database Encryption in the same org, standard Shield Platform Encryption limitations apply.

Required Editions

Available in both Salesforce Classic (not available in all orgs) and Lightning Experience.
Available in: Enterprise, Performance, and Unlimited Editions with the Salesforce Shield or Shield Platform Encryption licenses.
Available for free in Developer Edition.

These apps don’t support data encrypted with Shield Platform Encryption.

  • Connect Offline
  • Commerce Cloud (Shield Platform Encryption supports Salesforce B2B Commerce version 4.10 and later)
  • Einstein Recommendation Engine in Marketing Cloud Engagement (includes Einstein Recommendations, Einstein Web Recommendations, and Einstein Email Recommendations)
  • Salesforce Einstein (includes Einstein Search, Sales Cloud Einstein, Einstein Discovery, Einstein Builders, and Einstein Vision and Language)
  • Heroku (but Heroku Connect does support encrypted data)
  • Marketing Cloud - Engagement (but Marketing Cloud Next, Marketing Cloud Advanced/Growth and Marketing Cloud Connect do support Shield Platform Encryption)
  • Sales productivity features that require a public cloud provider to store data
  • Social Customer Service
  • CRM Analytics (Platform Encryption for Data 360 supports Tableau Next)
  • Thunder
  • Quip
  • Salesforce Billing

These apps and features don’t support Database Encryption.

  • Commerce Cloud
  • Quip
  • MuleSoft
  • CRM Analytics
  • Heroku
  • Background encryption service for data that’s encrypted with Database Encryption
  • Export and destroy actions for Database Encryption keys
  • On-demand or self-service data sync to the latest Database Encryption keys
  • Bring Your Own Key (BYOK) with opt-out of key derivation
  • Shield Cache-Only Key Service
  • External Key Management (EKM)
  • Real-Time Event Monitoring integration for the Database Encryption key lifecycle

Legacy portals (customer, self-service, and partner) don’t support data encrypted with Shield Platform Encryption or Database Encryption. If legacy portals are active, you can’t turn on Shield Platform Encryption.

 
Loading
Salesforce Help | Article