--- sourceDocument: Brazil Platform security sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Platform security ft:clusterId : - psec bundleId : - psec workflow : - Platform --- # Encryption # Encryption {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read Protect your sensitive data and stay compliant with regulatory  requirements and standards. |-|-|-| | [Key Management Framework](https://www.servicenow.com/docs/TqlBRsapwmP_nswK03cVmQ "The Key Management Framework (KMF) API/UX lets you fully customize and manage how cryptographic operations are performed on your ServiceNow instance. The ServiceNow Key Management Framework provides a secure and comprehensive interface for instance-side cryptographic key management services.") [Use the Key Management Framework (KMF) to fully customize and manage how cryptographic operations are performed on your ServiceNow instance.](https://www.servicenow.com/docs/TqlBRsapwmP_nswK03cVmQ "The Key Management Framework (KMF) API/UX lets you fully customize and manage how cryptographic operations are performed on your ServiceNow instance. The ServiceNow Key Management Framework provides a secure and comprehensive interface for instance-side cryptographic key management services.") | [Field Encryption](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") [Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") | [Field Encryption Enterprise](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") [Use Field Encryption Enterprise to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") | | [Cloud Encryption](https://www.servicenow.com/docs/C7ABCeX1ACwjCD4pJA1Cmw "ServiceNow Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow Platform Encryption subscription bundle.") [Encrypt your instance database using block encryption, along with enhanced key management.](https://www.servicenow.com/docs/C7ABCeX1ACwjCD4pJA1Cmw "ServiceNow Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow Platform Encryption subscription bundle.") | [Platform Encryption entitlement bundle](https://www.servicenow.com/docs/kgz4neM3TYVuTBJe8spPSg "With Key Management, Field Encryption is upgraded at no additional charge to include highly configurable encryption modules. You can also optionally upgrade to the unlimited-use license. Subscribe to the new encryption entitlement bundle, Platform Encryption, which includes Field Encryption Enterprise and Cloud Encryption.") [Upgrade to unlimited-use Field Encryption Enterprise, Cloud Encryption, and Database Encryption.](https://www.servicenow.com/docs/kgz4neM3TYVuTBJe8spPSg "With Key Management, Field Encryption is upgraded at no additional charge to include highly configurable encryption modules. You can also optionally upgrade to the unlimited-use license. Subscribe to the new encryption entitlement bundle, Platform Encryption, which includes Field Encryption Enterprise and Cloud Encryption.") | [Full Disk Encryption (FDE)](https://www.servicenow.com/docs/uHVeG8YLUJ6CCkEWo~maVA "Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.") [Full disk encryption applies encryption to the entire storage system within the database server only. Because this is the only customer data-storing component.](https://www.servicenow.com/docs/uHVeG8YLUJ6CCkEWo~maVA "Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.") | | [Edge Encryption](https://www.servicenow.com/docs/XPE9c0W2lIvvsGk2_9ngEA "ServiceNow Edge Encryption encrypts sensitive data on your company premises before sending it over the internet to your ServiceNow instance. Data is encrypted in flight and remains encrypted at rest.") [Encrypts sensitive data on your company premises before sending data over the internet to your ServiceNow instance. Data remains encrypted at rest on the instance.](https://www.servicenow.com/docs/XPE9c0W2lIvvsGk2_9ngEA "ServiceNow Edge Encryption encrypts sensitive data on your company premises before sending it over the internet to your ServiceNow instance. Data is encrypted in flight and remains encrypted at rest.") | [Certificates](https://www.servicenow.com/docs/M~EUNR89eq7gF9Suy7wOxw "Your instance requires certificates to establish secure connections and validate signatures.") [Use Certificates to establish secure connections and validate signatures.](https://www.servicenow.com/docs/M~EUNR89eq7gF9Suy7wOxw "Your instance requires certificates to establish secure connections and validate signatures.") | [Database Encryption](https://www.servicenow.com/docs/gP7pkwyZu25BsQyUAA4xTA "ServiceNow offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.") [Encrypt all stored data in real-time, providing protection for data online and offline with no loss of functionality.](https://www.servicenow.com/docs/gP7pkwyZu25BsQyUAA4xTA "ServiceNow offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.") | [ ] {#encryption-landing__table_vcy_yrq_dsb} * **[Key Management Framework](https://www.servicenow.com/docs/gWG0Ws7Cy5kJLRsRHn~IdA)** Use the Key Management Framework (KMF) to generate, exchange, store, use, and replace the cryptographic keys used to encrypt and decrypt sensitive data on your ServiceNow instance. * **[Unified Secrets Gateway](https://www.servicenow.com/docs/HzwIrDkGtuXxIFlzG34iTQ)** Secure secrets on your instance from unauthorized access using Unified Secrets Gateway. * **[Certificates](https://www.servicenow.com/docs/M~EUNR89eq7gF9Suy7wOxw)** Your instance requires certificates to establish secure connections and validate signatures. * **[Field Encryption](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ)** Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption. * **[Column Level Encryption](https://www.servicenow.com/docs/DfadHDBuVYTN1aeLzRyOwA)** Column Level Encryption permits and denies access to encrypted data based on user role. Column Level Encryption includes basic key management using encryption modules. * **[Cloud Encryption with Key Management](https://www.servicenow.com/docs/C7ABCeX1ACwjCD4pJA1Cmw)** ServiceNow® Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow® Platform Encryption subscription bundle. * **[Full disk encryption](https://www.servicenow.com/docs/uHVeG8YLUJ6CCkEWo~maVA)** Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection. * **[Edge Encryption](https://www.servicenow.com/docs/XPE9c0W2lIvvsGk2_9ngEA)** ServiceNow® Edge Encryption ™ encrypts sensitive data on your company premises before sending it over the internet to your ServiceNow instance. Data is encrypted in flight and remains encrypted at rest. * **[Database Encryption](https://www.servicenow.com/docs/gP7pkwyZu25BsQyUAA4xTA)** ServiceNow® offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.