How to completely hide a field, including Activity Log?
My organization is hiring an agency to help us with our marketing efforts. We plan to give them access to our Marketo instance. Our instance is synced with Salesforce and we have sensitive customer data (two specific fields) synced into our Marketo instance that we do not want the agency to have access to.
We're considering creating a 'Role' for the agency to set the appropriate permissions and 'hiding' the two sensitive fields. However, while testing these permissions, I've noticed that although the two sensitive fields are 'hidden', the agency would still have visibility into their values via peoples' Activity Log where there are rows for Activity Type = Change Data Value and the field names and values are listed.
Question 1: Is it possible to hide a field *and* prevent it from appearing in the activity log (so that we can truly prevent access to these data points in this manner)?
Question 2: Alternatively, is there a better way to give access to the agency and restrict access to these two specific fields?
Thanks for taking a look!