Encryption can be used in two situations.
Encryption in Transit.
Encryption at Rest (EAR)
Encryption in Transit
Refers to data that is encrypted when it is in transit, including from your browser to the web server and other third parties via integrations. Encrypting data in transit protects your data from man-in-the-middle-attacks.
Encryption at Rest
Refers to data that is encrypted when it is stored (not moving) — either on a disc, in a database, or some other form of media. In addition to encryption of data during transit, encryption of data when it is stored in the servers provides an even higher level of security. EAR protects against any possible data leak due to server compromise or unauthorized access.
Encryption is done at the application layer using the AES-256 algorithm, which is a symmetric encryption algorithm that uses 128-bit blocks and 256-bit keys. The key used to convert the data from plain text to cipher text is called the Data Encryption Key (DEK). The DEK is further encrypted using the KEK (Key Encryption Key), which provides yet another layer of security. The keys are generated and maintained by our in-house Key Management Service (KMS).
What Data we encrypt in Zoho Office Integrator?
We encrypt all the files or documents which are temporarily stored during editing process in all three (Zoho Writer, Zoho Show and Zoho Sheet) services. We also encrypt personally identifiable information like email addresses and IP addresses.
Zoho Writer - It includes images (supported extensions > jpg, png, gif, jpeg and bmp) and documents (supported file formats > docx, doc, docm, dot, dotm, dotx, rtf, odt, txt, html, htm, tex and pdf).
Zoho Show - It includes images, audio files, video files, and presentations (supported file formats > ppt, pptx, pps, sxi, ppsx, and odp).
Zoho Sheet - It includes images and spreadsheets (supported file formats > xls, xlsx, ods, csv and tsv).
Full-disk Encryption
In addition to application layer encryption, full disk encryption is available in our EU (Europe), IN (India), and AU (Australia) datacenter.