Odaseva Data Encryption for Salesforce is an enterprise-grade encryption solution designed to protect sensitive data stored within Salesforce environments. The product addresses threats from internal actors, external attackers, and third-party vendors by providing end-to-end encryption through a dedicated secure vault. It is designed to help organizations meet global data privacy and residency regulations across the 144+ countries that have enacted such laws. Key capabilities include: - Client-side or server-side encryption, with the option to use the customer's own KMS or Odaseva's KMS for key management - Role- and location-based access controls that allow authorized users to interact directly with protected data and files within Salesforce - Searchable encrypted fields to maintain usability alongside security - Dynamic data redaction via the Odaseva API, with configurable masking options for sensitive fields - Detailed audit logs covering both user and administrator activity within the vault - Cross-border data transfer blocking to enforce strict data residency requirements - Real-time SIEM monitoring of user and admin vault activity - A centralized management console for managing policies, users, sharing rules, and security settings The solution is targeted at enterprise organizations handling highly sensitive data such as medical records or PCI-scoped data within Salesforce, and follows a Zero Trust security model to limit the impact of potential breaches.