#Field Level Encryption0 discussing

Hi all

My company has decided to enable encryption, but the process is a bit confusing for me since I haven’t done this before. Has anyone enabled both database-level and field-level encryption? Do we have to enable both? How do you manage your keys and handle backups?

I’m especially concerned about key management — whether it’s better to use the Salesforce-managed keys or go with BYOK. How do you handle key rotation and key backups?

I'm looking for information around Marketing Cloud and Field Level Encryption. We have an integration that uses SSJS to create data extensions and APIs to insert data into SFMC data extensions. 

• Is it possible to create an FLE compliant data extension via SSJS/API or do you have to utilize the Contact Builder UI to create these tables?
• If you are using queries to move data in the system and some of the data is encrypted, are you able to use the encrypted fields in your select statements or are there limitations around using SQL with FLE?

Any help would be appreciated, thank you!

#Marketing Cloud #Field Level Encryption