Encryption

Protect your sensitive data and stay compliant with regulatory  requirements and standards.

Key Management Framework Use the Key Management Framework (KMF) to fully customize and manage how cryptographic operations are performed on your ServiceNow instance.	Field Encryption Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.	Field Encryption Enterprise Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.
Cloud Encryption Encrypt your instance database using block encryption, along with enhanced key management.	Platform Encryption entitlement bundle Upgrade to unlimited-use Field Encryption Enterprise, Cloud Encryption, and Database Encryption.	Full Disk Encryption (FDE) Full disk encryption applies encryption to the entire storage system within the database server only. Because this is the only customer data-storing component.
Edge Encryption Encrypts sensitive data on your company premises before sending data over the internet to your ServiceNow instance. Data remains encrypted at rest on the instance.	Certificates Use certificates to establish secure connections and validate signatures.	Database Encryption Encrypt all stored data in real-time, providing protection for data online and offline with no loss of functionality.

• Key Management Framework
  Use the Key Management Framework (KMF) to generate, exchange, store, use, and replace the cryptographic keys used to encrypt and decrypt sensitive data on your ServiceNow instance.
• Certificates
  Your instance requires certificates to establish secure connections and validate signatures.
• Field Encryption
  Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.
• Column Level Encryption
  Column Level Encryption permits and denies access to encrypted data based on user role. Column Level Encryption includes basic key management using encryption modules.
• Cloud Encryption with Key Management
  ServiceNow® Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow® Platform Encryption subscription bundle.
• Full disk encryption
  Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.
• Edge Encryption
  ServiceNow® Edge Encryption ™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.
• Database Encryption
  ServiceNow® offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.