Rachel Beard, a Salesforce security architect, walks through the three invisible security layers Salesforce manages for you: physical infrastructure with 24/7 on-site controls, application protections including encryption at rest and metadata separation, and network security with encryption in transit and continuous monitoring.
Questions this video answers
Rachel Beard, security architect at Salesforce.
Hyperforce (public cloud infrastructure).
Yes — all data storage is encrypted at rest without customers needing to turn anything on.
Around‑the‑clock physical security on premise (24/7).
Computer security and incident response team (CSIRT) operating 24/7.
Chapters
In a world of constant digital threats, how can you be confident that your data is safe? At Salesforce, that confidence is built on a foundation of trust. Welcome to our trusted Enterprise Security series. We're going to unpack the concept of shared responsibility at Salesforce and show you how we work together to protect your data. I'm Rachel Beard, a security architect here at Salesforce. We often talk about security in three layers. The invisibles, the configurables and the enhanceables. In this video we're starting with the foundation, the invisibles. These are the powerful security controls that Salesforce manages for you. They're always on, working invisibly in the background to protect your data. Today, we'll dive into what those controls are. When we talk about these invisible security measures, we start at the physical level, the infrastructure layer. This means protecting the very facilities and equipment where your data lives. This includes around the clock physical security on premise 24 7, monitoring of activities within the building, and advanced measures taken to ensure no improper access to equipment. Next, let's move on to the application tier. With Hyperforce, our public cloud infrastructure, all data storage is encrypted at rest without our customers needing to turn anything on. At Salesforce we use a metadata driven architecture model. Our customers data is stored physically separate from their metadata and without the metadata to provide context, it's very difficult for anyone to read the raw data. Finally, let's move on to the network tier. Our data gets encrypted in transit and our networks are under constant surveillance. We're actively identifying, intercepting and patching threats and we have a dedicated computer security and incident response team operating 24 7. You can think of them as our digital firefighters. Their sole mission is to detect, contain and respond to any security incident, keeping you informed and ensuring business continuity. The security measures I unpacked here today are tested and audited routinely. So make sure you take some time to check out our compliance attestations@compliance.salesforce.com and at the same time, Salesforce is constantly evolving our security architecture in response to the growing complexity of threats. Stay tuned for the rest of this security mini series where I'll be joined by one of our security product managers as we unpack the configurables, those out of the box security controls our customers have, as well as our enhanceables which provide added layers of data protection. Thanks for joining us today and we'll see you next time.
