Success Story: Rolls-Royce & Partners Finance

Overview

When Rolls-Royce & Partners Finance launched a new data exchange and collaboration platform for the aviation sector, they faced a critical security challenge: how to protect a system containing technical records and partner-shared data from malicious content — without disrupting collaboration. 

By implementing WithSecure Cloud Protection, the organization secured its Salesforce environment, met strict aviation and data compliance requirements, and guaranteed that users could only access files that had been scanned and confirmed safe. 

The challenge: a growing platform, a hidden security gap

Introduced in 2020, the Salesforce platform quickly enabled data specialists, software providers, and airline customers to seamlessly exchange information across the aviation industry. 

Today, it serves thousands of external users alongside internal teams — all uploading and sharing highly sensitive technical data, intellectual property, and other regulated information. 

However, Salesforce does not provide native malware scanning for uploaded files or shared links. With sensitive aviation data and IP at stake, any malware incident could compromise not just the organization, but the entire partner ecosystem. 

“Salesforce doesn’t scan files and links moving in and out of Salesforce. Much of that data was coming from external users, and that was a serious risk we needed to solve.” 

The organization’s security team needed an enterprise-grade solution that could: 

The solution: real-time protection for regulated data in Salesforce

After evaluating options recommended by Salesforce, the security and architecture teams selected WithSecure Cloud Protection — a solution already trusted by leading aviation organizations. 

WithSecure Cloud Protection integrates natively as a lightweight Salesforce application, scanning every uploaded file and shared link in real time. With average scan times of under one second, the solution maintains strong security without slowing down users or workflows. 

The native integration delivered: 

“We wanted an enterprise solution from a recognized provider. It meant we could launch the project quickly, confident the solution was compliant and properly certified.”  

The impact: compliance, confidence, and trust

WithSecure Cloud Protection enables the organization to secure a business-critical platform while preserving the speed and openness that makes Salesforce valuable to the aviation sector. 

Key outcomes:

“We know all files and links accessed by users are scanned for threats immediately and are safe. This achieves both compliance and peace of mind.” 

The solution now protects both the Rolls-Royce & Partners Finance and its partner ecosystem, enabling safe collaboration on sensitive aviation projects. 

Advice for other organizations

“Cloud security is user-based, so start by understanding who will use your Salesforce environment and how. We knew external users would be uploading files directly into Salesforce — meaning malware could be stored or shared, intentionally or otherwise. Asking these questions early allowed us to mitigate risk and focus on getting the full value out of the Salesforce platform.”