Salesforce Com, Inc.

Salesforce, Inc.

Yu Chen

Marla Hay

Yvonne Zhou

Shivan Kaul Sahib

Michael Allan Friedman

William Charles Eidson

David Hacker

Michael Goldberg Boilen

Hui Fung Herman Kwong

Shakti Prakash Das

Wolfgang Krause

Described are methods and systems for using policies to comply with a person's request for data pertaining to the person, pursuant to applicable data privacy laws. A policy is retrieved responsive to receiving a query that includes data to identify records that store data pertaining to the person. The policy indicates first and second database objects, and respective first and second sets of fields, which store data that pertains to persons. The policy is applied. Applying the policy includes retrieving, as first values, data stored in the first set of fields of a first record associated with the data in the query, and retrieving, as second values, data stored in the second set of fields of a second record associated with the first record. The first and second values, and the names of the fields from which they were retrieved, are stored in a document.

Using policies to comply with a request from a person for data that pertains to a person

Implementations retrieve a first event that published to a first source of events responsive to updating, deleting, or inserting a first record in a database object that stores records relating to consent. The first event is processed. Processing the first event includes storing in an attribute of a second event an identifier for a second record that relates to the first record and that is in a second database object that stores records relating to consent. If the first record was inserted or updated, processing the first event includes storing in an attribute of the second event one or more identifiers and respective values of fields of the first record based on attributes of the first event.

Selectively processing an event published responsive to an operation on a database record that relates to consent

Methods and apparatus for updating a denormalized database object after updating, deleting, or inserting a record in a source database object are described. A first operation on a source database object that involves a record of the source database object being updated, deleted, or inserted is performed. A first part of a corresponding second operation involving a respective record of the denormalized database object being updated, deleted, or inserted is performed. A query result that references an aggregate field of a set of records in the denormalized database object is altered. The altering includes an aggregation operation using values in the query result being performed and altering that part of the query result that includes the aggregate field of the set of records. A second part is optionally performed to complete the corresponding second operation and update the denormalized database object.

Updating of a denormalized database object after updating, deleting, or inserting a record in a source database object

At least one database table of denormalized values corresponding to selected values of field properties in records across multiple disparate tables of the database environment is maintained. A structured query is received through a structured query language application program interface (API). The structured query to request a listing of records across the multiple disparate tables of the database environment. The database table is searched for indications corresponding to records across the multiple disparate tables of the database environment corresponding to the selected values indicating communication with a specified party. A listing of records from across the multiple disparate tables that satisfy the selected values is returned through the structured query language API.

Techniques and architectures for managing privacy information and permissions queries across disparate database tables

A method and apparatus for tokenization of user-traceable data are described. User traceable data is data that is not directly personal data but can be traced back to the identity or an activity of the user. A first raw value is encrypted into a first token using a symmetric key encryption mechanism based on a combination of a second raw value including personal data of a user and a second token resulting from the tokenization of the second raw value where the first token is an anonymized representation of the first raw value.

Method and apparatus for linked encryption tokenization of user traceable data

A method and a system for enabling multiple log record consumers to comply with regulations and requirements regarding privacy and handling of data are described. A determination, based on a log record format being of a first of the log record types, that a first field from a raw log record is to be tokenized based on a first tokenization strategy of multiple tokenization strategies in the first log record type, is performed. Each one of the tokenization strategies identifies a tokenization mechanism from tokenization mechanisms for generating a token from a raw value to enable compliance with a set of regulations and requirements regarding privacy and the handling of data. For a first raw value in the first field a first token is generated that is an anonymized representation of the first raw value using a tokenization mechanism identified by the first tokenization strategy in the log record type.

Growing community of inventors

Bellevue, WA, United States of America

Yu Chen