Salesforce Shield provides advanced protection to defend against escalating threats, navigate compliance, and accelerate your AI initiatives safely. A proven suite of four powerful products, Shield lets you effortlessly identify, monitor, encrypt, and secure your most important asset: customer data.
Salesforce Shield encompasses four security products in one powerful suite. Monitor user and agent activity and block risky behavior with Event Monitoring, encrypt sensitive data at rest with Platform Encryption, maintain forensic audit trails with Field Audit Trail, and automatically scan millions of records for hidden PII with Data Detect. Whether you're navigating compliance requirements like HIPAA, SOX, or PCI DSS, or securing a new Agentforce deployment, Shield goes beyond the platform baseline to give you the controls — and the evidence — to prove your data is protected.
Proactively protect your sensitive data from internal and external risks. Instantly block and get alerted to suspicious activity like bulk exports or unauthorized logins using customizable security policies. Surface unknown anomalies before they become breaches.
Gain deep visibility into user behavior. Track a broad range of events to see exactly what data your users—both humans and AI agents—are accessing. Easily connect and stream real-time events to your SIEM or SSPM so your security team has the full picture.
Turn event data into actionable insights. Monitor security, performance, and adoption at a glance with pre-built dashboards, empowering you to eliminate bottlenecks before they impact users.
Set encryption policies to protect your most sensitive data and maintain regulatory compliance. Easily point and click to select the data you’d like to encrypt, including fields, files, search indexes, attachments, or the entire database. You can also encrypt Data 360 data to keep your most critical assets protected.
Achieve greater control, visibility and insight. You have the flexibility to bring your own keys (BYOK), rotate keys, and store keys outside of Salesforce starting with AWS.
Get instant clarity into your encryption processes. Understand downstream impacts, filter and drill down on sensitive fields, and make faster, more confident decisions about protecting your data and meeting encryption-related mandates efficiently.
Tailor field history tracking to align seamlessly with your business needs by monitoring only the specific fields you choose. With simple point-and-click setup, you can easily understand, analyze, and audit critical information from creation to the latest update. Now featuring the flexibility to track up to 200 fields per object, you can confidently maintain a pulse on your data activity.
Demonstrate compliance during audits with records of field-level changes. View the history of changes made to tracked fields, including who made the changes, when, and what changes were made. Easily roll back accidental data changes to original values.
Accelerate audit readiness and maintain an accurate system of record. Generate greater operational insights into your business by getting a comprehensive view of your field tracking coverage. Identify untracked high-risk fields and quickly revert accidental changes before they impact your business.
Intelligent pattern matching makes it easy to detect sensitive information—like credit card numbers, SSNs, national IDs, and email addresses—in your Salesforce orgs. For fields specific to your business or industry, you can also define custom patterns and keywords.
Scan only what you need, with the flexibility to exclude previously classified data. Set up recurring scans on a weekly, monthly, or recurring basis for continuous data protection.
Capture results in a comprehensive scan, providing an actionable view of sensitive data. Based on scan results, easily update data sensitivity and compliance categories and inform other security controls, such as access permissions or encryption for specific fields, to comply with data protection laws and security best practices.
View, analyze, and manage your security health in a single view. Simplify how you monitor your security, compliance, and governance metrics.
Simplify data management to reduce compliance costs and maintain trust. Streamline customer consent by offering intuitive, low-code forms for preference customization.
Accelerate release cycles and develop safely by protecting sensitive data in sandboxes, driving compliance at scale.
Protect your data with automated backups, proactive notifications of loss or corruption, and intuitive restoration.
Having that single source of truth helps you master your data and know how to share your data. Only the member or the entity that needs their data can access it.
Brian CahillVP, Pharmacy Segment CIO, Humana
From support, expert guidance, and resources to our trusted partner ecosystem, we’re here to help you get more value from Salesforce in the AI era.
Sign up for our monthly IT newsletter to get the latest research, industry insights, and product news delivered straight to your inbox.
Try Headless 360 platform Services for 30 days. No credit card, no installations.
Tell us a bit more so the right person can reach out faster.
Get the latest research, industry insights, and product news delivered straight to your inbox.
Salesforce Shield is a suite of four products that exist for organizations who need a level of security and protection above and beyond the security that’s baked into the platform. These products help businesses meet compliance and industry regulatory requirements, monitor access to sensitive information stored in Salesforce, report on unauthorized or undesired activity, manage encryption keys for advanced security, and find and classify sensitive data quickly.
Salesforce Shield is a paid add-on bundle that includes four natively integrated tools: Platform Encryption (AES-256 field- and file-level encryption at rest with customer-managed keys), Event Monitoring (tracks 80+ event types including logins, API calls, report exports, and agent actions, with real-time threat detection and Transaction Security Policies), Field Audit Trail (retains field-level change history for up to 10 years across up to 200 fields per object), and Data Detect (scans your org to find sensitive or PII data you may not know is there). All four are included when you purchase Shield — you do not need to license them separately. Customers may also purchase individual components à la carte if they need only one capability.
We’ve built robust solutions like Salesforce Shield for customers who need to proactively secure critical data, navigate evolving compliance requirements, and cultivate customer trust. Offering enhanced security beyond what’s built-in to the platform, Shield provides granular auditing, monitoring, and control of sensitive information, ensuring access is strictly limited to authorized personnel. Build a strong data security strategy and protect sensitive data with Shield.
Shield and Security Center are two separate products that complement each other. Shield generates the underlying security data and protection — it encrypts your data, logs user activity, tracks field changes, and identifies sensitive data. Security Center is a separate product that centralizes that data into actionable dashboards, giving security teams a single view across multiple Salesforce orgs. Many customers start with Shield for immediate data protection needs, then add Security Center as their security program matures. Shield is required to produce the data that Security Center surfaces for encryption coverage and threat detection signals.
Salesforce Shield is widely used by organizations subject to HIPAA, GDPR, SOX, FINRA, ISO 27001, and other regulatory frameworks. Platform Encryption addresses data-at-rest requirements by encrypting sensitive fields and files with customer-managed keys, supporting crypto-shredding for Right-to-Erasure obligations under GDPR. Field Audit Trail supports audit and forensic requirements by retaining field-level change history for up to 10 years — the standard Salesforce platform retains only 18 months — across up to 200 fields per object. Event Monitoring provides the detailed audit logs (login activity, data exports, API access, report runs) required for SOX compliance, HIPAA breach investigations, and FINRA record-keeping. Data Detect helps satisfy data classification and discovery obligations by scanning your org for PII and sensitive data patterns. Salesforce publishes SOC 2 Type II and ISO 27001:2022 certifications that independently validate the key management and security controls underlying Shield. Compliance posture is a shared responsibility — Salesforce provides the tools; your organization's security and compliance teams determine which controls to enable and how to configure them.
Yes — Shield Event Monitoring is designed to export to external SIEM platforms. Salesforce provides a native connector for Microsoft Sentinel (via Azure Functions) that allows direct streaming of event logs into Sentinel. For other tools, event log data can be exported via the Event Monitoring REST API (hourly log files) or the Pub/Sub API for near real-time streaming. Shield Real-Time Event Monitoring enables near-real-time delivery of events to external systems. Salesforce also natively supports OpenTelemetry, enabling integration with observability tools.
Salesforce Shield is purpose-built for the Salesforce platform, which enables capabilities that third-party tools cannot replicate. Because Shield is native, it can encrypt data at the application layer while still allowing that data to be searchable, filterable, and usable in workflows and reports — something no external tool can do. Shield Event Monitoring and Security Center provide real-time threat detection using native platform events, rather than periodic polling from an external API connection (which consumes API governor limits and introduces latency). Third-party SaaS Security Posture Management (SSPM) tools typically focus on configuration monitoring; they do not encrypt data or retain long-term audit history. Shield provides a unified solution — encryption, monitoring, audit trail, and data discovery — in a single product on the same platform powering your CRM, with one vendor relationship, one support team, and one renewal cycle.
Pricing varies based on each customer's individual needs. Our sales team will work with you to tailor a package that meets your requirements and price considerations, no matter your company's size or industry.
Data loss prevention solutions allow organizations of all sizes to monitor data access and usage, and ultimately uphold customer trust by protecting sensitive data from internal and external threats. This includes proactively identifying and mitigating potential data breaches, intellectual property theft, and unauthorized data access.
Data loss prevention solutions enable organizations to meet compliance and industry regulations, protect their brand and uphold customer trust by employing custom security policies that protect sensitive data from internal and external threats.
To select the right data loss prevention solution for your organization, focus on your specific security needs, including any industry-specific or compliance regulations to which your business may need to adhere, as well as data classification needs and user access management strategies. Choose a trusted, scalable platform that introduces comprehensive security for your sensitive data.
