Clouds
Difenso protects your data across the cloud environments you already use — Salesforce, AWS, Google Workspace — with end-to-end key management you control, regardless of the provider.
Salesforce
The Difenso application for Salesforce encrypts your sensitive data directly within your environment, using a unique encryption key randomly generated for each record. Only data owners and authorized users can decrypt it. Compatible with both the Classic and Lightning interfaces, it lets you manage encryption of your objects and accounts, track the full lifecycle of protected data, and relies on the Difenso platform certified CSPN by ANSSI.
Amazon Web Services (AWS)
Difenso integrates with AWS KMS through an XKS (External Key Store) proxy, the standard mechanism AWS provides for delegating key management to an external system. Your data stored on Amazon S3 is encrypted using keys generated outside AWS’s infrastructure and never kept, giving you full control independent of the cloud provider.
Google Workspace
Difenso protects multiple Google Workspace services directly from their own interfaces: your Gmail emails and the files you share on Google Drive are encrypted end-to-end, without changing your daily habits.