Encryption

Encryption at Zoho Notebook


Encryption is primarily used to safeguard the contents of a message so that only the intended recipient can read it. This is done by replacing the contents with unrecognizable data, which can be understood only by the intended recipient. This is how encryption became a method to protect data from those who may want to steal it.

Encryption can be used in two situations:
  1. Encryption in Transit
  2. Encryption at Rest (EAR)

Encryption in Transit

This refers to data that is encrypted when it is in transit — including from your browser to the web server and other third parties via integrations. Encrypting data in transit protects your data from man-in-the-middle-attacks. 

Encryption at Rest

This refers to data that is encrypted when it is stored (not moving) — either on a disc, in a database, or some other form of media. In addition to encryption of data during transit, encryption of data when it is stored in the servers provides an even higher level of security. EAR protects against any possible data leak due to server compromise or unauthorized access.

Encryption is done at the application layer using the AES-256 algorithm, which is a symmetric encryption algorithm and uses 128-bit blocks and 256-bit keys. The key used to convert the data from plain text to cipher text is called Data Encryption Key (DEK). The DEK is further encrypted using the KEK (Key Encryption Key), providing yet another layer of security. The keys are generated and maintained by our in-house Key Management Service(KMS).

What Data we encrypt in Zoho Notebook?

The following data are encrypted in Zoho Notebook:

Data
Data Source
Notecards and Activity

Added by users for:
  1. All note card types
  2. Information about device models for modifying any types of notes
Attachments

Added by users when attaching files using Filecard

User Details
Phone Number added by user
Object Detection

Objects that are present inside images added as Text content.

OCR

Text Content extracted using OCR

Resource Keywords

Keywords which are used for searching contents

Integration

    Generated by system for following actions:
  1. Time Zone information when user integrates with IFTTT
  2. Slack Resource name using Notebook Slack integration
  3. Web hook URL for notifications, sent using Zoho Flow, Slack and IFTTT

Offline Access

  1. User OAuth token. Generated during third party migration and internal user initiated migration.
  2. Recent Searches Search queries entered within Notebook

Video Chapter Details
Added by users when creating or editing chapters inside a video notecards.
AI Mind Maps
Created by users when generating the Mind Map for notecards in Notebook.
User Data Export
Generated when a user initiates a data export from Notebook settings.
Audio/Video Transcript and Templates

  1. Auto-generated by Notebook's AI from audio and video notecards added by users.
  2. Created by users or admins when setting up structured content-extraction templates.

Full-disk Encryption

In addition to application-layer encryption, we use Self-Encrypting Drives (SEDs) to provide hardware-based full-disk encryption in India (IN), Australia (AU), Europe (EU), and Japan (JP) data centers. For the United States (US) and China (CN) data centers software-based disk encryption methods are used.

Frequently Asked Questions

1. Is all my data in Zoho Notebook encrypted?

Yes. Zoho Notebook encrypts data both while it is being transmitted (Encryption in Transit) and while it is stored on our servers (Encryption at Rest).


2. Do I need to enable encryption manually?

No, Encryption is enabled automatically for all Zoho Notebook users. No additional setup or configuration is required.


3. Can Zoho Notebook employees read my encrypted data?

Your data is protected using application-layer encryption and managed through Zoho's Key Management Service (KMS). Encryption keys are securely generated and managed internally, helping protect your data from unauthorized access.

Related Articles