DuoKey CacheOnly Key Wrapper is a security solution offered by DuoKey, designed to enhance Salesforce data protection. It works by isolating encryption keys in a secure cache, ensuring that sensitive data is decrypted only when necessary and for a limited time. This approach reduces the risk of unauthorized access to sensitive information within Salesforce environments. The solution integrates with Salesforce's Cache-Only Key method, allowing organizations to keep their encryption keys externally without storing them persistently in Salesforce. This enables organizations to maintain control and sovereignty over their data while complying with security requirements.