We have Salesforce Shield for encryption at rest. Have you implemented your archiving solution with Shield before?

Salesforce Shield doesn’t support Big Objects or outside data store (AWS Cloud). So, we built our own encryption tool as part of the product offering using the AES 256 algorithm & key rotation. This solution has been aligned and validated by the Salesforce ISV tech team. This supports both Big Objects and outside storage out of the box.

Can we encrypt archived data?

Fields of archived data can be encrypted at rest for standard/custom objects. It uses the highest standard of encryption technology and also supports key rotation policy.

Can the archived data be encrypted?

Yes, the archived data can always be encrypted.