Data Masking Strategies for Data Types in Salesforce

The Commvault software provides different data-masking strategies based on the data type that you want to mask. For more information about the data types, see Salesforce Object Basics and its subsections in the Salesforce documentation.

Data Masking Strategies

The following data masking types are available in the Commvault software:

• Dictionary: Dictionary data masking replaces fields or sub-fields of the item with random values from a dictionary. The Commvault software supplies a default dictionary for each data type. You can update values in the dictionaries and add data to the dictionaries.

• Fixed string: Fixed string data masking replaces the original string with a string that you specify when you configure a data-masking policy.

• Format-preserving encryption: Format-preserving encryption generates masked output that is the same length and format as the input. For example, the masked output of a 20-character user name is a 20-character string.

  Note: Format-preserving encryption only works for alphanumeric characters.

• Numeric range: Numeric range data masking generates a random number between a minimum value and a maximum value that you specify when you configure a data-masking policy.

• Numeric variance: Numeric variance data masking takes the initial value and varies it by the percentage that you specify when you configure a data-masking policy.

• Shuffling: Shuffling data masking takes values from multiple rows in a block (up to 2000 rows) and exchanges the values for the same field by using the Fisher-Yates algorithm. For example, shuffling can be applied to the Name field in an Account object:

  • The Name field without shuffling:

    Id record1 record2 record3

    Name account1 account2 account3

  • The Name field with shuffling:

    Id record1 record2 record3

    Name account2 account3 account1

Salesforce Data Type Support

The data masking strategies available for each Salesforce data type are listed.