Crystal Lotus engagement
Data Residency for Regulated Records
Some countries require certain data about their companies and people to stay inside the country. This solution keeps the regulated parts of a Salesforce record in-country and shows them only to the people entitled to see them, without breaking the application built on top.
What It Does
Each record carries a country. If that country has residency rules and the record was created under conditions that make it regulated, the record's regulated fields and files are stored in a service inside that country, and Salesforce keeps only the identifier and the unregulated fields.
When a user opens the record, their country is compared with the record's. A match gives full access: the regulated values are fetched from the in-country service and merged into the page. No match gives read access: regulated fields show a redaction marker, files cannot be opened or downloaded, and if that user is allowed to edit, their entries are stored in-country and then hidden from them again.
How It Is Controlled
Redaction is enforced by the in-country service and mirrored in the browser, so the server is the authority and the client is a safety net. Which fields and files are regulated, and whether users outside the country may edit, is configured per country and per object. Configuration changes made in Salesforce are synchronised to the service.
One design rule shaped everything: no automated logic on the Salesforce side may depend on regulated data. Any decision that needs it is surfaced to a person to review and act on. Logging records identifiers only.
How It Is Adopted
Clients choose between an API specification, which they implement however they like as long as it behaves the same, and our ready-to-use codebase installed in their own AWS or Azure environment. Either way the client owns the infrastructure and the data; we provide patches, and maintenance is available as a separately scoped service.
Ready to Talk to an Architect?
A 30-minute call with the architect who would own your work. You leave with a written view of the next step and a rough sizing, whether or not you go ahead with us.
Book an Architecture Discovery Callor email contact@crystallotus.co