Security and Encryption in Zoho Apptics
Overview
Protecting customer data is fundamental to Zoho Apptics. Multiple layers of authentication and encryption safeguard your data throughout its lifecycle, from the moment it leaves your application until it is securely processed and stored within Zoho's infrastructure.
Zoho Apptics secures data using:
- JWT-based request authentication
- RSA encryption for sensitive data in transit
- TLS encryption for all network communication
- AES-256 encryption for data at rest
- Zoho's in-house Key Management Service (KMS)
Together, these mechanisms protect against unauthorized access, data interception, man-in-the-middle attacks, and server compromise.
JWT-based request authentication
Every request sent from the Apptics SDK is authenticated using JSON Web Tokens (JWTs).
JWT authentication provides an additional layer of security by validating SDK requests before they are processed. Unlike relying solely on application credentials, signed JWTs help ensure that requests originate from trusted SDK instances and have not been tampered with.
JWT-based authentication validates that requests originate from trusted SDK instances, verifies request integrity, and helps prevent unauthorized API access and credential misuse.
RSA encryption for sensitive data
Sensitive information collected by the SDK is additionally protected using RSA public-key encryption before it leaves the client application.
How it works?
The Apptics SDK securely fetches the RSA public key from the Apptics service. Before transmission, designated sensitive fields (such as personally identifiable information) are encrypted locally using the fetched public key.
Only the corresponding RSA private key, securely stored on the Apptics servers, can decrypt the data. This asymmetric encryption model ensures that sensitive information remains unreadable even if intercepted during transmission.
Encryption in Transit
All communication between your application, the Apptics SDK, Zoho Apptics services, and supported integrations is secured using Transport Layer Security (TLS). TLS protects customer data from Man-in-the-middle (MITM) attacks, network eavesdropping, packet interception, and data tampering during transmission.
RSA encryption for designated sensitive fields complements TLS by providing application-layer protection in addition to transport-layer encryption.
For more information, see the Zoho Encryption in Transit documentation.
Encryption at Rest
Once data reaches Zoho Apptics, it is encrypted before being stored. Zoho Apptics uses AES-256 (Advanced Encryption Standard) for application-layer encryption of stored data. AES-256 is an industry-standard symmetric encryption algorithm used to protect highly sensitive information. Zoho's application-layer encryption uses AES-256 with CBC mode and PKCS5 padding for encrypted fields. Read Zoho's encryption White paper for further details.
For more information, see Zoho's Key Management Service (KMS) documentation.
What data is protected?
Depending on the feature being used, Zoho Apptics protects information, including:
- Personally identifiable information (PII), such as email addresses and IP addresses
- Authentication-related information
- Core analytics and engagement data (session, screens, events, APIs)
- Crash diagnostics
- Performance monitoring data
- User and device metadata
- Feedback data
- Store reviews data
Sensitive information is protected during transmission and while stored within Zoho Apptics.
Note: The application developer is responsible for collecting user consent and configuring data collection in accordance with applicable privacy regulations. Zoho Apptics secures data after it is collected and transmitted by the application.Full-disk encryption
In addition to application-layer encryption, Zoho infrastructure supports hardware-based full-disk encryption in supported data centers, providing another layer of protection for stored data.
Hardware-based full-disk encryption is currently available in the following regions:
- US (United States of America)
- IN (India)
- EU (European Union)
- JP (Japan)
- CN (China)
- AU (Australia)
- AE (United Arab Emirates)
- CA (Canada)
- SA (South Africa)
For more information, refer to the Zoho's full-disk encryption documentation.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Zoho FSM Video Tutorials
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho CPaaS?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Zoho Apptics MCP server
Overview Zoho Apptics Model Context Protocol (MCP) server helps teams to analyze product data such as usage, engagement, performance stats using conversational AI. Query data directly through AI interfaces (Claude, Cursor, etc.) using natural ...Getting started with Zoho Apptics
Getting Started Welcome to Zoho Apptics! The right place for your apps. Zoho Apptics is the privacy-friendly product analytics solution that provides you with in-app usage, engagement, performance, and growth monitoring for your mobile, web, and ...Zoho Projects integration in Zoho Apptics
Overview Zoho Projects integration helps you carry out your day-to-day tasks effectively. You can assign any crashes, non-fatal, in-app feedback, or store reviews that you receive for the app as bugs and track their progress. You will be able to do ...Microsoft Teams integration with Zoho Apptics
The Microsoft Teams integration in Zoho Apptics allows you to receive real-time alerts directly in your Teams channels for critical events such as crashes and in-app feedback. This helps your team stay informed and respond quickly without needing to ...Zoho Cliq integration in Zoho Apptics
Overview Zoho Cliq integration offers real-time notifications for crashes, non-fatal, in-app feedback, and store reviews that you receive for your app. You can do the configuration once you create an account in Zoho Cliq for your organization. You ...
New to Zoho LandingPage?
Zoho LandingPage Resources