Encryption at Zoho Connect
What is encryption?
Encryption is primarily used to safeguard the contents of a message so that only the intended recipient can read it. This is done by replacing the contents with unrecognizable data, which could be understood only by the intended recipient. This is how encryption became a method to protect data from those who might want to steal it.
Encryption can be used in two situations:
- Encryption in Transit
- Encryption at Rest (EAR)
Encryption in Transit
This refers to data that is encrypted when it is in transit — including from your browser to the web server and other third parties via integrations. Encrypting data in transit protects your data from man-in-the-middle-attacks.
Encryption at Rest
This refers to data that is encrypted when it is stored (not moving) — either on a disc, in a database, or some other form of media. In addition to encryption of data during transit, encryption of data when it is stored in the servers provides an even higher level of security. EAR protects against any possible data leak due to server compromise or unauthorized access.
Encryption is done at the application layer using the AES-256 algorithm, which is a symmetric encryption algorithm and uses 128-bit blocks and 256-bit keys. The key used to convert the data from plain text to cipher text is called Data Encryption Key (DEK). The DEK is further encrypted using the KEK (Key Encryption Key), providing yet another layer of security. The keys are generated and maintained by our in-house Key Management Service(KMS).
What Data we encrypt in Zoho Connect?
The following data is encrypted in Zoho Connect: Contents of Feeds, Forum posts, Articles, Town Hall sessions, Groups, Announcements, Files, Channels, Survey results, and Tasks including comments, video files, and attachments. In custom apps, data in the form fields that have encryption enabled or labeled as ePHI are encrypted.
Data in the user profile is also encrypted. Network admins can mark the user profile fields that might contain any protected health information (ePHI) as 'personal information' for additional security. Learn more about encrypting personal information in user profile.
Full-disk Encryption
In addition to application-layer encryption, we use Self-Encrypting Drives (SEDs) to provide hardware-based full-disk encryption in India (IN), Australia (AU), Europe (EU), and Japan (JP) data centers. For the United States (US) and China (CN) data centers software-based disk encryption methods are used.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Integrating Ekincare with Zoho Connect
Feature availability Overview Integrating Ekincare with Zoho Connect will empower your organization to prioritize employee wellness and access health records easily within Connect. Who can access Ekincare? Once the admin enables this integration, all ...Stay HIPAA compliant with Zoho Connect
Overview The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and ...Integrating Medi Assist with Zoho Connect
Feature availability Overview Medi Assist is an inclusive healthcare platform. When integrated with Zoho Connect, employees of your organization can manage their health benefits, claims, and wellness programs effectively. Who can access Medi Assist? ...Zoho ConnectでのHIPAAへの準拠
概要 米国における医療保険の相互運用性と説明責任に関する法律（ HIPAA: Health Insurance Portability and Accountability Act ）では、データの保存中または転送中に収集、アクセス、処理、保存される個人の医療情報を保護するため、一定の措置が義務付けられています。 Zoho Connectは、自社の目的のためにHIPAAにより保護される医療情報を収集、使用、保存、保持しません。ただし、Zoho ...Zoho Connectにおけるデータの暗号化
暗号化とは 暗号化とは、データの内容を保護して、本来意図した相手のみが内容を読めるようにするためのものです。宛先の相手のみがデータの内容を理解し、他の人からは識別できないようにするため、データの内容をそのままでは読み取れないように置き換えます。このように、暗号化することでデータを不正なアクセスから保護できます。 Zoho Connectにおいて適用される暗号化には、以下の2種類があります。 転送時の暗号化 保管時の暗号化 転送時の暗号化 ...
New to Zoho LandingPage?
Zoho LandingPage Resources