What is Encrypted with Database Encryption?

Database Encryption encrypts the entire transactional database. All data stored within the database is encrypted to include standard and custom entities, all metadata, all setup configuration data, chatter posts, Einstein data, transaction logs, and storage catalogs.

With Database Encryption, every database transaction is encrypted, so all fields are encrypted implicitly. Not encrypted are files and attachments too large to be stored within the database, temporary event change files, and search indexes. Data 360 data resources are encrypted separately through Platform Encryption for Data 360.

Database Encryption uses a dedicated tenant secret.