FAQ-000689 - Data Storage and Encryption Security / Data Classification and Handling

Yes, you'll need to encrypt customer data when extracting and transferring it between Salesforce orgs. This ensures compliance with enterprise security standards and protects sensitive information during transfer operations. Key requirements: - Use strong encryption methods for data in transit - Implement secure transport protocols (HTTPS/TLS) - Use Named Credentials for secure authentication - Avoid hardcoded credentials in your code - Follow proper key management practices These practices help protect against data vulnerabilities and maintain security compliance throughout the transfer process.

The original answer was too brief for such an important security topic. While it correctly stated the requirement to encrypt data during org-to-org transfers, it lacked actionable guidance that developers need to implement this securely. The updated answer preserves the original requirement but adds essential best practices that align with AppExchange security standards. I selected security rules that directly relate to data encryption and secure transfer practices discussed in this FAQ: - ApexBadCrypto: Relates to the FAQ's focus on encryption requirements - this rule helps identify weak cryptographic implementations that could compromise the data encryption the FAQ requires - ApexInsecureEndpoint: Directly connects to the FAQ's transfer operations - this rule catches insecure HTTP endpoints that would violate the secure transfer requirements mentioned - ApexSuggestUsingNamedCred: Supports the FAQ's security standards by promoting secure authentication during data transfers between orgs - AvoidHardcodedCredentialsInFieldDecls, AvoidHardcodedCredentialsInVarDecls, AvoidHardcodedCredentialsInHttpHeader: These three rules directly support the FAQ's enterprise security standards by preventing credential exposure during the transfer operations described - AvoidInsecureHttpRemoteSiteSetting: Relates to the FAQ's secure transfer requirements by ensuring external connections use secure protocols - UseHttpsCallbackUrlConnectedApp: Connects to the FAQ's data transfer security by ensuring secure callback mechanisms in connected applications