You are here:
Storing Encrypted Data for Database Encryption
For Database Encryption, encrypted data is stored in a database fragment along with the IV and database tenant secret key ID.
The key material’s ID is used to locate the key value and creation date. These values are stored in a Salesforce object called TenantSecret. When a user accesses or saves encrypted data, the database encryption service retrieves the fragment and then uses the key ID to get the appropriate secret from the encrypted key cache.

