Encryption at rest and transit for ServiceNow

[davidrojas25]

How does encryption work within SN. Is data encrypted at rest if so how and how about in transit?

[Raju Koyagura]

Checkout this may helpful Encryption Support FAQ - ServiceNow Wiki

[skapj]

ServiceNow makes use of encryption for both data in transit and data at rest. ServiceNow customers access their instances over the Internet using forced Transport Layer Security (TLS) encryption for all user access. The level of encryption is based on the browser and must be configured by the customer since ServiceNow does not modify any client settings. ServiceNow provides optional capabilities with regard to the encryption of data at rest within the system, which customers can apply at their own discretion.   ServiceNow can provide 3 types of encryption for data at rest upon customer request: column level encryption, edge encryption, and full disk encryption.

[mikeadler]

Hey David,

I thought it was important to help clarify some points made in this discussion.

With respect to your question, at a database encryption level, ServiceNow provides encryption functionality with a couple of products, Edge Encryption and Column-level encryption. The ServiceNow Edge Encryption White Paper that I have available via our Edge Encryption product page treats both of these products in more detail and should provide you with a reference on this topic as it relates to data encryption at ServiceNow.

From a database level perspective, with Edge Encryption, you can encrypt your ServiceNow data with encryption keys that you own within your network before it leaves your network. Your ServiceNow data therefore remains encrypted in transit and at rest. However, with Column-level encryption (docs site link), you can only encrypt your ServiceNow data with encryption keys that you store directly on your ServiceNow instance. In this case, at a database encryption level, your data is only encrypted at rest.

Please kindly let me know if this helps to answer your question and if you need additional information.

Kind regards,

Mike

[r_t_bryan]

Hi mikeadler

Great information!

Can you tell me if data is encrypted at Rest OOTB? Or does it require additional configuration?

Regards,

Rober