Encryption on Table

[smrevanth]

Does anyone know a way to encrypt a table? Does SNow has this feature?

I have idea about Encrypted fields. But what about tables?

Thanks in advance

[rnalband]

Revanth,

I don't think ServiceNow has any solution for table level encryption.     They have Edge Encryption with a lot of limitations.   I think they have to do the database encryption.   So we no need to worry about encrypting data at rest.   Hope ServiceNow will come up with a solution in their future releases.

Thanks

Rahamath

[mikeadler]

Hi Revanth,

Great question. Currently, only encryption of individual fields and attachments defined within a table are supported. We are looking at encryption at the tablespace level, but of course, it wouldn't be prudent to specifically identify when in the future that would be an option.

Depending on the amount of data you need to encrypt (columns and attachments) and your security requirements such as 1) keys hosted on-premises within the customer environment vs at ServiceNow and 2) need for data to be encrypted at the application layer in-transit, in-use and at-rest, you might want to consider Edge Encryption or Column-Level encryption, while also keeping in mind some of the considerations that each approach has inherent with it's functionality.

Could you please kindly let me know if this response is helpful and/or answers your question by marking it accordingly?

Kind regards,

Mike

[mikeadler]

As an update, Database Encryption is the official name of the product that utilizes tablespace encryption and it is now available. A customer’s sales representative can provide the ordering information as there is an additional cost for it.

How does Database Encryption work? Data when in use will be unencrypted at the table level. Once the data is no longer in use, the data will return to its encrypted state. To be more granular, when a user is accessing data, the data from the table will be unencrypted. As an example, if someone has an Incident record open, the Incident table will become unencrypted. If there is not data from other tables being accessed, then only the Incident table will be unencrypted for that time, all other data will remain encrypted. Once no data from that table is being accessed, the table returns to an encrypted state.

Could you please kindly indicate here if this response answers your question? And you found it helpful?

Kind regards,

Mike