--- sourceDocument: Australia Platform security sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security Release : - australia ft:locale : - en-US ft:publication_title : - Australia Platform security ft:clusterId : - psec bundleId : - psec workflow : - Platform --- # Encryption # Encryption {#ariaid-title1} Release version: Australia Updated March 12, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read Protect your sensitive data and stay compliant with regulatory  requirements and standards. |-|-|-| | [Key Management Framework](https://www.servicenow.com/docs/a1XrC~zuZiOj4cNyjKGujA "The Key Management Framework (KMF) API/UX lets you fully customize and manage how cryptographic operations are performed on your ServiceNow instance. The ServiceNow Key Management Framework provides a secure and comprehensive interface for instance-side cryptographic key management services.") [Use the Key Management Framework (KMF) to fully customize and manage how cryptographic operations are performed on your ServiceNow instance.](https://www.servicenow.com/docs/a1XrC~zuZiOj4cNyjKGujA "The Key Management Framework (KMF) API/UX lets you fully customize and manage how cryptographic operations are performed on your ServiceNow instance. The ServiceNow Key Management Framework provides a secure and comprehensive interface for instance-side cryptographic key management services.") | [Field Encryption](https://www.servicenow.com/docs/PFznU_xdGqqLxsb6B~UdIA "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") [Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.](https://www.servicenow.com/docs/PFznU_xdGqqLxsb6B~UdIA "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") | [Field Encryption Enterprise](https://www.servicenow.com/docs/PFznU_xdGqqLxsb6B~UdIA "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") [Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.](https://www.servicenow.com/docs/PFznU_xdGqqLxsb6B~UdIA "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") | | [Cloud Encryption](https://www.servicenow.com/docs/Sn~ZSQuEMVyrZq5fH1FKDw "ServiceNow Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow Platform Encryption subscription bundle.") [Encrypt your instance database using block encryption, along with enhanced key management.](https://www.servicenow.com/docs/Sn~ZSQuEMVyrZq5fH1FKDw "ServiceNow Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow Platform Encryption subscription bundle.") | [Platform Encryption entitlement bundle](https://www.servicenow.com/docs/tvHtz~M_HJ8xon3itLmsLw "With Key Management, Field Encryption is upgraded at no additional charge to include highly configurable encryption modules. You can also optionally upgrade to the unlimited-use license. Subscribe to the new encryption entitlement bundle, Platform Encryption, which includes Field Encryption Enterprise and Cloud Encryption.") [Upgrade to unlimited-use Field Encryption Enterprise, Cloud Encryption, and Database Encryption.](https://www.servicenow.com/docs/tvHtz~M_HJ8xon3itLmsLw "With Key Management, Field Encryption is upgraded at no additional charge to include highly configurable encryption modules. You can also optionally upgrade to the unlimited-use license. Subscribe to the new encryption entitlement bundle, Platform Encryption, which includes Field Encryption Enterprise and Cloud Encryption.") | [Full Disk Encryption (FDE)](https://www.servicenow.com/docs/xfDLXbws7Rpfg1Y1FMqBlQ "Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.") [Full disk encryption applies encryption to the entire storage system within the database server only. Because this is the only customer data-storing component.](https://www.servicenow.com/docs/xfDLXbws7Rpfg1Y1FMqBlQ "Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.") | | [Edge Encryption](https://www.servicenow.com/docs/tEY4SHaVXnH80SiyzIMowQ "ServiceNow Edge Encryption encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.") [Encrypts sensitive data on your company premises before sending data over the internet to your ServiceNow instance. Data remains encrypted at rest on the instance.](https://www.servicenow.com/docs/tEY4SHaVXnH80SiyzIMowQ "ServiceNow Edge Encryption encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.") | [Certificates](https://www.servicenow.com/docs/Wm8ZASvFQ78hMqyJRexrCQ "Your instance requires certificates to establish secure connections and validate signatures.") [Use certificates to establish secure connections and validate signatures.](https://www.servicenow.com/docs/Wm8ZASvFQ78hMqyJRexrCQ "Your instance requires certificates to establish secure connections and validate signatures.") | [Database Encryption](https://www.servicenow.com/docs/y_lIDukIlUGsysSxTCvZtg "ServiceNow offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.") [Encrypt all stored data in real-time, providing protection for data online and offline with no loss of functionality.](https://www.servicenow.com/docs/y_lIDukIlUGsysSxTCvZtg "ServiceNow offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.") | [ ] {#encryption-landing__table_vcy_yrq_dsb} * **[Key Management Framework](https://www.servicenow.com/docs/MHiryPH57IQmrXZUhh6nrA)** Use the Key Management Framework (KMF) to generate, exchange, store, use, and replace the cryptographic keys used to encrypt and decrypt sensitive data on your ServiceNow instance. * **[Certificates](https://www.servicenow.com/docs/Wm8ZASvFQ78hMqyJRexrCQ)** Your instance requires certificates to establish secure connections and validate signatures. * **[Field Encryption](https://www.servicenow.com/docs/PFznU_xdGqqLxsb6B~UdIA)** Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption. * **[Column Level Encryption](https://www.servicenow.com/docs/tCRJ~ZHe2Akl751KpIUkxw)** Column Level Encryption permits and denies access to encrypted data based on user role. Column Level Encryption includes basic key management using encryption modules. * **[Cloud Encryption with Key Management](https://www.servicenow.com/docs/Sn~ZSQuEMVyrZq5fH1FKDw)** ServiceNow® Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow® Platform Encryption subscription bundle. * **[Full disk encryption](https://www.servicenow.com/docs/xfDLXbws7Rpfg1Y1FMqBlQ)** Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection. * **[Edge Encryption](https://www.servicenow.com/docs/tEY4SHaVXnH80SiyzIMowQ)** ServiceNow® Edge Encryption ™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest. * **[Database Encryption](https://www.servicenow.com/docs/y_lIDukIlUGsysSxTCvZtg)** ServiceNow® offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.