Data Mask: Frequently Asked Questions (FAQ)

Q: What are the prerequisites for implementing Data Mask?

A: You can implement Data Mask if the following conditions are met:

• You have purchased an Unlimited, Performance, or Enterprise Edition license in your production environment.
• My Domain is configured.
• The Lightning Experience UI is enabled. 

Q: Is a license required to use Data Mask?

A: Yes, Data Mask requires a paid add-on license. If you wish to purchase an add-on license or need more details regarding licensing, please contact your Salesforce Account Executive.

Help:lInstall the Managed Package in a Production Org

Q: Is Data Mask available in Japanese environments?

A: Yes. Since Spring '21, Data Mask supports the following languages, including Japanese:

• English
• Portuguese (Brazil)
• Dutch
• French
• German
• Italian
• Japanese
• Spanish (Mexico)
• Spanish (Spain)

Q: Does the masking process only change how data is displayed on the screen?

A: No, it processes the actual data within the Sandbox based on the selected masking level. For example, if a field is marked for deletion, the data is removed, and the field becomes empty. The masking levels are as follows:

• Replace private Sandbox data with random characters.
• Replace private Sandbox data with similar mapped words.
• Replace private Sandbox data using pattern-based masking.
• Delete sensitive data. Note: This process does not affect your production data.

Q: Can I mask all fields in an object at once?

A: We recommend masking only fields that contain personal or sensitive information among the data copied to the Sandbox. A feature to mask all fields at once is not provided. However, once a masking rule is configured, it can be saved and reused, eliminating the need to configure it from scratch every time.

Help: Set Masking Rules

Q: Can I switch between different masking methods within the same Sandbox?

A: Data Mask is not a feature for changing how data is displayed; it is a tool that performs bulk processing to mask the stored data itself at the field level according to a masking policy (anonymization, pseudonymization, deletion, etc.). Therefore, you cannot switch the display of masking within the same Sandbox.

Consider the following methods:

1. Apply different masking policies to each Sandbox: You can create different masking policies for multiple Sandboxes and switch the masking method on a per-Sandbox basis.
2. 2.Configure filters: By configuring filters, you can narrow down the scope of the masking process within the same Sandbox.

Q: Can I use Data Mask on an existing Sandbox?

A: Data Mask is a managed package installed in the production org. After installation, you execute the masking process from a Sandbox created from that production org. Please refer to the following help article for standard installation steps:

Help:lInstall the Managed Package in a Production Org

However, for Sandboxes created before you contracted for Data Mask, you can install Data Mask directly into the Sandbox by following additional steps. For details, refer to the following help article:

Help: Install in Existing Sandboxes

Other reference materials:

• Data Mask Considerations
• Trailblazer Community: Official: Salesforce Data Mask