Encryption is primarily used to safeguard the content of a message so that only the intended recipients can read it. This is done by replacing the content with unrecognizable data, which can be understood only by the intended recipient. Encryption has become a vital method for protecting data from those who might want to steal it.
Encryption can be used in two situations:
- Encryption in Transit
- Encryption at Rest (EAR)
Encryption in Transit
Refers to data that is encrypted when it is in transit — including from your browser to the web server and other third parties via integrations.Encrypting data in transit protects your data from man-in-the-middle-attacks.
Encryption at Rest
Refers to data that is encrypted when it is stored (not moving) — either on a disc, in a database, or some other form of media.In addition to encryption of data during transit, encryption of data when it is stored in the servers provides an even higher level of security. EAR protects against any possible data leak due to server compromise or unauthorized access.
Encryption is done at the application layer using the AES-256 algorithm which is a symmetric encryption algorithm and uses 128-bit blocks and 256-bit keys.The key used to convert the data from plain text to cipher text is called Data Encryption Key(DEK). The DEK is further encrypted using the KEK (Key Encryption Key), thus, providing yet another layer of security.The keys are generated and maintained by our in-house Key Management Service(KMS).
What data do we encrypt in Zoho Projects Plus?
Zoho Projects Plus is a suite of project management applications including Zoho Projects, Zoho Sprints, Zoho Analytics, Zoho WorkDrive, Zoho Notebook and Zoho Learn. Data is being encrypted at rest in the following applications.
Zoho Projects
Zoho Projects encrypts:
- All file attachments and documents
- PII collected through the product
- Sensitive data like integration tokens
- Up to ten custom fields in each of the Tasks, Bugs, Timesheets, and Projects modules
Zoho Sprints
Zoho Sprints encrypts:
- All file attachments and documents.
- PII collected through the product such as email addresses, attachments, and third-party authorization parameters.
- Sensitive data like integration tokens.
- PII data collected via custom fields.
Zoho Analytics
Zoho Analytics encrypts the data marked as PII (Personally Identifiable Information), ePHI (Electronically Protected Health Information),and the credentials used for importing and exporting data to the other destinations and sources, respectively.
Zoho WorkDrive
Zoho WorkDrive encrypts all the content of files stored in Zoho WorkDrive, as well as passwords for external share links and personally identifiable information like email addresses and IP addresses.
Zoho Notebook
Data
| Data Source
|
Notecards and Activity
| Added by users for:
All note card types
Information about device models for modifying any types of notes
|
Attachments
|
Added by users when attaching files using Filecard
|
User Details
| Phone Number added by user
|
Object Detection
|
Objects that are present inside images added as Text content.
|
OCR
|
Text Content extracted using OCR
|
Resource Keywords
|
Keywords which are used for searching contents
|
Integration
|
Generated by system for following actions:
Time Zone information when user integrates with IFTTT
Slack Resource name using Notebook Slack integration
Web hook URL for notifications, sent using Zoho Flow, Slack and IFTTT
|
Offline Access
|
User OAuth token. Generated during third party migration and internal user initiated migration.
Recent Searches Search queries entered within Notebook
|
Video Chapter Details
| Added by users when creating or editing chapters inside a video notecards.
|
AI Mind Maps
| Created by users when generating the Mind Map for notecards in Notebook.
|
User Data Export
| Generated when a user initiates a data export from Notebook settings.
|
Audio/Video Transcript and Templates
|
Auto-generated by Notebook's AI from audio and video notecards added by users.
Created by users or admins when setting up structured content-extraction templates.
|
Zoho Learn
Zoho Learn encrypts contents of Articles, Lessons, Templates, Edit history, Descriptions, Comment, Discussions and their replies, Quiz - Questions, Answers and their feedbacks, Assignments, Reviews, Attachments and their names, invited email ids, and Passwords of externally shared manuals.
Full-disk encryption
Besides application layer encryption, full disk encryption is available in Europe (EU), India (IN), Australia (AU) and Japan (JP) datacenters.