Encryption & access control — found from sitemap — Zoho Cliq

Cited by

Facts read from this source

• Tls versions Report an error

  “We follow the latest TLS protocol version 1.2/1.3 and use certificates generated using SHA 256 and ciphers (AES_CBC/AES_GCM 256 bit/128 bit keys for encryption, SHA2 for message authentication and ECDHE_RSA as the key exchange mechanism).”

• Field encryption standard Report an error

  “Data in these are encrypted according to AES 256 standard with AES/CBC/PKCS5Padding mode.”

• Field encryption default org key Report an error

  “Type 1- This is the default type of encryption that we do for data from all Orgs. In this type, our KMS allots a key to each org.”

• Field encryption pii column key Report an error

  “Type 2- We do this type of encryption for sensitive and Personally Identifiable Information (PII).”

• Search encrypted variations Report an error

  “Equality Preserving Encryption: In this type, only one IV corresponds to a key.”

• File encryption Report an error

  “The encryption is based on the standard AES 256 algorithm, and the mode of encryption is either CTR or GCM.”

• Backup encryption Report an error

  “All data we take as backup will be encrypted at rest.”

• Logs encryption Report an error

  “Zoho Logs uses Hadoop Distributed File System (HDFS) to store and manage logs. We use the encryption technology of Hadoop to encrypt the data while key management is handled by our KMS.”

• Cache encryption Report an error

  “We use Redis open source software for storing and managing cache data.”

• Key hierarchy Report an error

  “Data Encryption Key(DEK): The key used to convert the data from plain text to cipher text, or the key used to encrypt the data.”

• Key rotation Report an error

  “Key rotation is automatically triggered every six months for all services, or immediately in the event of a key compromise in the KMS.”

• Key generation Report an error

  “KMS generates these keys and IV using the Java Security library and the SecureRandom number generator.”

• Byok ekms Report an error

  “AWS KMS Google KMS Thales CTM Fortanix DSM Azure Key Vault Futurex DSM”

• Byok Report an error

  “BYOK, or Bring Your Own Key, is a security feature that allows organizations to manage and control their own encryption keys, rather than relying on the cloud service provider to manage them.”

• Encrypted data workdrive Report an error

  “Workdrive All files. For more details, refer link.”

• Encrypted data mail Report an error

  “Mail All mail content, attachments and fields that contain personal information”

• Encrypted data CRM Report an error

  “CRM Custom fields marked as encrypted, all files and all mail content sent and received via CRM.”

• Encrypted data desk Report an error

  “Desk Ticket thread content, attachments, custom fields marked as encrypted and tokens.”

• Encrypted data finance Report an error

  “Finance Bank account details, custom fields that are marked as encrypted, employee details which contain sensitive personal information, travel documents, bank statements and attachments.”

• Encrypted data dataprep Report an error

  “Dataprep All of user's data imported into Zoho DataPrep including PII (Personally Identifiable Information), ePHI (Electronically Protected Health Data), and credentials.”

• Encrypted data services other Report an error

  “Notebook Notecard and Attachments. For more details, refer link. Sign Documents, signature images and tokens. For more details, refer link.”

• Self encrypting drives Report an error

  “We employ self-encrypting drives(SEDs) to support hardware-based full disk encryption.”

• Kms access control Report an error

  “Access to KMS is restricted, by default, and allowed only to specific personnel of Zohocorp.”

• In house kms Report an error

  “Our in-house Key Management Service (KMS) creates, stores and manages keys across all services.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Compliance Counsel Encryption & access control
• The Platform Engineer Encryption & access control
• The Security Officer Encryption & access control
• The Security Officer Deployment & data custody
• The Skeptic Encryption & access control
• The Team Lead Encryption & access control
• The Works Council Advocate Encryption & access control