Odaseva Data Encryption for Salesforce

Odaseva Data Encryption for Salesforce is an enterprise-grade encryption solution designed to protect sensitive data stored within Salesforce environments.

The product addresses threats from internal actors, external attackers, and third-party vendors by providing end-to-end encryption through a dedicated secure vault. It is designed to help organizations meet global data privacy and residency regulations across the 144+ countries that have enacted such laws.

Key capabilities include:

• Client-side or server-side encryption, with the option to use the customer's own KMS or Odaseva's KMS for key management
• Role- and location-based access controls that allow authorized users to interact directly with protected data and files within Salesforce
• Searchable encrypted fields to maintain usability alongside security
• Dynamic data redaction via the Odaseva API, with configurable masking options for sensitive fields
• Detailed audit logs covering both user and administrator activity within the vault
• Cross-border data transfer blocking to enforce strict data residency requirements
• Real-time SIEM monitoring of user and admin vault activity
• A centralized management console for managing policies, users, sharing rules, and security settings

The solution is targeted at enterprise organizations handling highly sensitive data such as medical records or PCI-scoped data within Salesforce, and follows a Zero Trust security model to limit the impact of potential breaches.