Salesforce Shield and Field-Level Encryption Compatibility

Field-Level Encryption encrypts data at rest and supports Platform Encryption users. Marketing Cloud Engagement can import data automatically from Sales Cloud and Service Cloud using a connector. This process decrypts the data from Sales Cloud and Service Cloud and transmits it to Marketing Cloud Engagement over a secure communication channel.

Use one of these methods to securely transfer and encrypt Sales Cloud and Service Cloud data into Marketing Cloud Engagement.

Synchronized Data Sources

Synchronized Data Sources supports Platform Encryption. This feature synchronizes data from your Salesforce org at specified time intervals, including data schema and relationships previously established in your Salesforce CRM account. Marketing Cloud Engagement encrypts fields identified as encrypted using Platform Encryption. An enabled user views encrypted data in Sales Cloud or Service Cloud. They can also select fields for synchronization in Marketing Cloud Engagement, which imports and stores this data in Synchronized Data Extensions. Marketing Cloud Engagement re-encrypts this data using a symmetric key.

Reports and Campaign Sends

Reports and Campaign Sends support Platform Encryption. After you install the Marketing Cloud Engagement Connector, you can send to Reports and Campaigns directly from your Sales Cloud account. A Marketing Cloud Engagement account that uses Field-Level Encryption encrypts data identified as encrypted from Sales Cloud or Service Cloud.

Journey Builder Events

Journey Builder Events don't support Platform Encryption. Marketing Cloud Engagement doesn't re-encrypt data imported via events. Journey Builder lets you create an entry event to power a journey based on Sales Cloud and Service Cloud data. Journey Builder then creates associated data extensions as it creates the entry events. Marketing Cloud Engagement doesn't encrypt data taken from Sales Cloud and Service Cloud as part of these entry events. You can use Journey Builder with Field-Level Encryption and implement Synchronized Data Extensions instead of data imports to maintain encryption.

Automation Studio Imports

Automation Studio imports don't support Platform Encryption. With Automation Studio, you can create an import activity that imports data from Sales Cloud and Service Cloud into Marketing Cloud Engagement. This data isn't encrypted during the import process. You can synchronize encrypted Salesforce Objects data using Synchronized Data Extensions.