Salesforce can be configured to route mail via Paubox, by directing outbound mail through Microsoft or Google Workspace accounts that are already sending via Paubox for email encryption. As long as Salesforce sends via your org's Microsoft or Google accounts, and those accounts are sending via Paubox, the emails will be encrypted in transit.
First, make sure that at the organization level, Salesforce is configured to allow this routing option (administrator credentials needed):
- "Gear" icon in the top right - select Setup
- “Email” dropdown on the left & select: Send through External Email Services
- "Send through Gmail/O365“ section - make sure switch is set to ON
- “Email” dropdown on the left & select: Deliverability
- "Access to Send Email" section - set the Access level to All email
Next, each user should update Salesforce settings:
- Toggle the radio button to send via Gmail or O365 rather than send via Salesforce:
- Profile picture (Cat/Astronaut picture) & select Settings
- “Email” dropdown on the left & select: My Email Settings
- Click radio button for Gmail or O365
- “Email” dropdown on the left and select: My Email to Salesforce
- Check “My acceptable email addresses” and make sure email address is listed & correct
Finally, send a test message from Salesforce to an external email address you have ...
... and look for the Paubox footer at the bottom for confirmation.
Note: This configuration generally works for individual users sending email out via Salesforce; does not apply when attempting to "send-as" other users, case replies, or automated system update emails.
Note: Only works in Salesforce Lightning Experience (options may not be allowed in "Classic" view).