What is Salesforce Shield?

Salesforce Shield is a suite of four products that exist for organizations who need a level of security and protection above and beyond the security that’s baked into the platform. These products help businesses meet compliance and industry regulatory requirements, monitor access to sensitive information stored in Salesforce, report on unauthorized or undesired activity, manage encryption keys for advanced security, and find and classify sensitive data with speed.

What can you do with Salesforce Shield?

Introduce comprehensive security for critical data in Salesforce, and get a real-time pulse on who has access to what data, when. Report on unauthorized or undesired activity to prevent, address, and monitor threats to sensitive information. Retain data history and strengthen data integrity for forensic-level compliance. Encrypt sensitive data while preserving business functionality, and identify and categorize critical data quickly to fortify your security posture.

Mitigate threats, drive adoption, and understand performance with Event Monitoring.

Event Monitoring

Track and audit behavior by monitoring security, tracking application performance, and gleaning product intelligence insights using event logs. Add visibility into Salesforce data by viewing and downloading events on a daily or hourly basis. Fifty-four API accessible events include logins/logouts, API calls, report exports, Apex executions, page loads, user interactions, and more.

Transaction Security Policies

Protect sensitive data from both internal and external threats with custom security policies created with clicks or code. Automatically block risky user actions, and prevent data loss before it occurs with use case-specific policies. Receive real-time notifications to any potential threats to respond with speed.

Real-Time Event Monitoring

Monitor user behavior in near real-time by choosing from a list of relevant event types. Proactively find security threats in your Salesforce orgs using automation, and respond to threats quickly based on events. Stay on top of compliance requirements, and respond to audits with ease by storing and querying event data using SOQL.

Encrypt sensitive data with Platform Encryption.

Encryption Policy

Set encryption policies to protect your most sensitive data and maintain regulatory compliance. Easily point and click to select the data you’d like to encrypt, including fields, files, attachments, search indexes, and more.

Key Lifecycle Management

Manage your own key lifecycle for greater control and flexibility and to meet data security requirements. You have the flexibility to bring your own keys (BYOK), rotate keys, and store keys outside of Salesforce starting with AWS.

Key Lifecycle Management

Encrypt your Data Cloud data

Platform Encryption has now been extended to Data Cloud, allowing you to encrypt your Data Cloud data with Shield keys. You can view, rotate, and audit your encryption keys, providing enhanced control and security over your data.

Strengthen data integrity for extended history with Field Audit Trail.

Customizable Tracking

Tailor field history tracking to align seamlessly with your business needs by monitoring only the specific fields you choose. Easily configure tracking with point-and-click setup to understand, analyze, and audit critical information from creation to the latest update.

Audit Log

Demonstrate compliance during audits with records of field-level changes. View the history of changes made to tracked fields, including who made the changes, when, and what changes were made. Easily roll back accidental data changes to original values.

Data Retention

Strengthen data integrity for compliance and visibility with data retention policies. Generate greater operational insights into your business by retaining data indefinitely. Easily delete data when retention is no longer necessary.

Find and classify sensitive information quickly with Data Detect.

Detect critical data

Use pattern matching to easily locate sensitive information, like email addresses, credit card numbers, social security numbers, URLs, and IP addresses, in your Salesforce orgs. Find PII in unexpected or unwanted places, such as in single-purpose fields that aren’t properly classified and free-form text fields that expose private data. Access insights to establish a deeper understanding of your data governance posture.

Address flagged information

Explore matched patterns, and view sensitive data across all records to get a granular view of what type of information lives where. Use these insights to take action and clean up records for improved compliance. Classify or reclassify data at the field level based on data sensitivity, as well as compliance category.

Protect customer data

Increase control over your data and stay compliant by applying granular controls around classified information. Update classification tags to comply with data protection laws and security best practices. Prevent users from making data entry mistakes, and proactively protect consumer information to maintain customer trust.