Learn About Encrypting CRM Analytics Data

When you turn on encryption for CRM Analytics, Salesforce applies your tenant secret to new datasets created or updated from encrypted Salesforce data. Shield Platform Encryption uses the same key management architecture for CRM Analytics data as other Shield-encrypted data. Authorized users see the unencrypted data in analytical dashboards and reports.

Note Data that’s in CRM Analytics before encryption is turned on isn’t encrypted. If existing data is imported from Salesforce objects through the data flow, the data becomes encrypted on the next data flow run. Other existing data, such as CSV data, must be reimported to become encrypted. Although existing data isn’t encrypted, it’s still accessible and fully functional in its unencrypted state when encryption is enabled.

You can use this feature on its own or along with Database Encryption. When you choose to encrypt CRM Analytics Data when Database Encryption is on, the CRM Analytics is first encrypted with its own Analytics tenant secret.