Data Masking Strategies for Data Types in Salesforce

Updated

The Commvault software provides different data-masking strategies based on the data type that you want to mask. For more information about the data types, see Salesforce Object Basics and its subsections in the Salesforce documentation.

Data Masking Strategies

The following data masking types are available in the Commvault software:

  • Dictionary: Dictionary data masking replaces fields or sub-fields of the item with random values from a dictionary. The Commvault software supplies a default dictionary for each data type. You can update values in the dictionaries and add data to the dictionaries.

  • Fixed string: Fixed string data masking replaces the original string with a string that you specify when you configure a data-masking policy.

  • Format-preserving encryption: Format-preserving encryption generates masked output that is the same length and format as the input. For example, the masked output of a 20-character user name is a 20-character string.

    Note: Format-preserving encryption only works for alphanumeric characters.

  • Numeric range: Numeric range data masking generates a random number between a minimum value and a maximum value that you specify when you configure a data-masking policy.

  • Numeric variance: Numeric variance data masking takes the initial value and varies it by the percentage that you specify when you configure a data-masking policy.

  • Shuffling: Shuffling data masking takes values from multiple rows in a block (up to 2000 rows) and exchanges the values for the same field by using the Fisher-Yates algorithm. For example, shuffling can be applied to the Name field in an Account object:

    • The Name field without shuffling:

      Id

      record1

      record2

      record3

      Name

      account1

      account2

      account3

    • The Name field with shuffling:

      Id

      record1

      record2

      record3

      Name

      account2

      account3

      account1

Salesforce Data Type Support

The data masking strategies available for each Salesforce data type are listed.

Salesforce data type

Data masking strategy

base64

Not applicable

boolean

Not applicable

byte

Not applicable

date

Shuffling

dateTime

Shuffling

double

  • Shuffling

  • Format-preserving encryption

  • Numeric range

  • Numeric variance

int

  • Shuffling

  • Format-preserving encryption

  • Numeric range

  • Numeric variance

string

  • Shuffling

  • Format-preserving encryption

  • Fixed string

  • Dictionary

time

Shuffling

address

  • Shuffling

  • Dictionary

anyType

  • Shuffling

  • Format-preserving encryption

  • Numeric range

  • Numeric variance

  • Fixed string

calculated

Not applicable

combobox

Not applicable

currency

  • Shuffling

  • Format-preserving encryption

  • Numeric range

  • Numeric variance

DataCategoryGroupReference

Not applicable

email

  • Shuffling

  • Format-preserving encryption

  • Fixed string

  • Dictionary

encryptedstring

  • Shuffling

  • Format-preserving encryption

  • Fixed string

ID

Not applicable

JunctionIdList

Not applicable

location

  • Shuffling

  • Dictionary

masterrecord

Not applicable

multipicklist

Shuffling

percent

  • Shuffling

  • Format-preserving encryption

  • Numeric range

  • Numeric variance

phone

  • Shuffling

  • Format-preserving encryption

  • Fixed string

  • Dictionary

picklist

Shuffling

reference

Not applicable

textarea

  • Shuffling

  • Format-preserving encryption

  • Fixed string

url

  • Shuffling

  • Format-preserving encryption

  • Fixed string