Using Youreka and Salesforce Shield (Platform Encryption)

Overview

With Shield encryption, data in SFDC can be encrypted on a field by field basis. These field types can be encrypted: Text, Text Area, Text Area (Long), Text Area (Rich), Email, Phone, URL, Date, Date/Time. In particular, Id, Number, Checkbox and Lookup fields cannot be encrypted.

Encrypted fields are decrypted on the fly, but they can’t be filtered on or sorted by in SOQL queries.

Youreka Objects and Fields

Due to filtering and sorting, the following fields in Youreka can’t be encrypted:

Form Template

• Name
• Status
• Managed Template RandomId

Section

• Type
• Linked Section Object Type
• Managed Template RandomId

Form

• Name
• Mobile Id
• Managed Template RandomId
• Fields in the field set used for Search

Question

• Type
• Link Field
• Link Object
• Link Lookup
• Random Id
• Answer
• Form Mobile ID
• Mobile Id

Check In

• Check In Date Time
• Mobile Id

Discovery Rule

• Name

Discovery Rule Group

• Name

Discovery Type

• Name

Form Gen Job

• Start Date
• End Date 

Other Objects and Fields

Youreka queries other objects for field links and to support mobile. That means that used fields in the following scenarios should not be encrypted:

• Any field used for filtering/sorting linked sections (errors when creating forms)
• Name fields of Objects used in Lookups (lookups won’t work if the Name field is encrypted)
• Any fields used in filters for Offline objects (errors in sync)

Technical Details

Encrypted fields have these properties:

• aggregatable: false
• encrypted: true
• filterable: false
• groupable: false
• searchPrefilterable: false
• sortable: false

More info at: https://developer.salesforce.com/docs/atlas.en-us.securityImplGuide.meta/securityImplGuide/security_pe_custom_fields.htm