--- sourceDocument: Brazil Platform security sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security Release : - brazil ft:locale : - en-US ft:publication_title : - Brazil Platform security ft:clusterId : - psec bundleId : - psec workflow : - Platform --- # Encryption # Encryption {#ariaid-title1} Release version: Brazil Updated September 10, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read Protect your sensitive data and stay compliant with regulatory  requirements and standards. |-|-|-| | [Key Management Framework](https://www.servicenow.com/docs/TqlBRsapwmP_nswK03cVmQ "The Key Management Framework (KMF) API/UX lets you fully customize and manage how cryptographic operations are performed on your ServiceNow instance. The ServiceNow Key Management Framework provides a secure and comprehensive interface for instance-side cryptographic key management services.") [Use the Key Management Framework (KMF) to fully customize and manage how cryptographic operations are performed on your ServiceNow instance.](https://www.servicenow.com/docs/TqlBRsapwmP_nswK03cVmQ "The Key Management Framework (KMF) API/UX lets you fully customize and manage how cryptographic operations are performed on your ServiceNow instance. The ServiceNow Key Management Framework provides a secure and comprehensive interface for instance-side cryptographic key management services.") | [Field Encryption](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") [Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") | [Field Encryption Enterprise](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") [Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ "Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.") | | [Cloud Encryption](https://www.servicenow.com/docs/C7ABCeX1ACwjCD4pJA1Cmw "ServiceNow Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow Platform Encryption subscription bundle.") [Encrypt your instance database using block encryption, along with enhanced key management.](https://www.servicenow.com/docs/C7ABCeX1ACwjCD4pJA1Cmw "ServiceNow Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow Platform Encryption subscription bundle.") | [Platform Encryption entitlement bundle](https://www.servicenow.com/docs/kgz4neM3TYVuTBJe8spPSg "With Key Management, Field Encryption is upgraded at no additional charge to include highly configurable encryption modules. You can also optionally upgrade to the unlimited-use license. Subscribe to the new encryption entitlement bundle, Platform Encryption, which includes Field Encryption Enterprise and Cloud Encryption.") [Upgrade to unlimited-use Field Encryption Enterprise, Cloud Encryption, and Database Encryption.](https://www.servicenow.com/docs/kgz4neM3TYVuTBJe8spPSg "With Key Management, Field Encryption is upgraded at no additional charge to include highly configurable encryption modules. You can also optionally upgrade to the unlimited-use license. Subscribe to the new encryption entitlement bundle, Platform Encryption, which includes Field Encryption Enterprise and Cloud Encryption.") | [Full Disk Encryption (FDE)](https://www.servicenow.com/docs/uHVeG8YLUJ6CCkEWo~maVA "Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.") [Full disk encryption applies encryption to the entire storage system within the database server only. Because this is the only customer data-storing component.](https://www.servicenow.com/docs/uHVeG8YLUJ6CCkEWo~maVA "Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.") | | [Edge Encryption](https://www.servicenow.com/docs/XPE9c0W2lIvvsGk2_9ngEA "ServiceNow Edge Encryption encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.") [Encrypts sensitive data on your company premises before sending data over the internet to your ServiceNow instance. Data remains encrypted at rest on the instance.](https://www.servicenow.com/docs/XPE9c0W2lIvvsGk2_9ngEA "ServiceNow Edge Encryption encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.") | [Certificates](https://www.servicenow.com/docs/M~EUNR89eq7gF9Suy7wOxw "Your instance requires certificates to establish secure connections and validate signatures.") [Use certificates to establish secure connections and validate signatures.](https://www.servicenow.com/docs/M~EUNR89eq7gF9Suy7wOxw "Your instance requires certificates to establish secure connections and validate signatures.") | [Database Encryption](https://www.servicenow.com/docs/gP7pkwyZu25BsQyUAA4xTA "ServiceNow offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.") [Encrypt all stored data in real-time, providing protection for data online and offline with no loss of functionality.](https://www.servicenow.com/docs/gP7pkwyZu25BsQyUAA4xTA "ServiceNow offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.") | [ ] {#encryption-landing__table_vcy_yrq_dsb} * **[Key Management Framework](https://www.servicenow.com/docs/gWG0Ws7Cy5kJLRsRHn~IdA)** Use the Key Management Framework (KMF) to generate, exchange, store, use, and replace the cryptographic keys used to encrypt and decrypt sensitive data on your ServiceNow instance. * **[Unified Secrets Gateway](https://www.servicenow.com/docs/HzwIrDkGtuXxIFlzG34iTQ)** Secure secrets on your instance from unauthorized access using Unified Secrets Gateway. * **[Certificates](https://www.servicenow.com/docs/M~EUNR89eq7gF9Suy7wOxw)** Your instance requires certificates to establish secure connections and validate signatures. * **[Field Encryption](https://www.servicenow.com/docs/usl_5DKKkEMqsFljFcfflQ)** Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption. * **[Column Level Encryption](https://www.servicenow.com/docs/DfadHDBuVYTN1aeLzRyOwA)** Column Level Encryption permits and denies access to encrypted data based on user role. Column Level Encryption includes basic key management using encryption modules. * **[Cloud Encryption with Key Management](https://www.servicenow.com/docs/C7ABCeX1ACwjCD4pJA1Cmw)** ServiceNow® Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow® Platform Encryption subscription bundle. * **[Full disk encryption](https://www.servicenow.com/docs/uHVeG8YLUJ6CCkEWo~maVA)** Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection. * **[Edge Encryption](https://www.servicenow.com/docs/XPE9c0W2lIvvsGk2_9ngEA)** ServiceNow® Edge Encryption ™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest. * **[Database Encryption](https://www.servicenow.com/docs/gP7pkwyZu25BsQyUAA4xTA)** ServiceNow® offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.