Encryption in Nila

Encryption helps protect sensitive data by converting readable information into an encrypted format that can only be accessed by authorized systems with the appropriate decryption keys. This process helps ensure that information remains secure from unauthorized access or interception.

In Nila, encryption is applied in two key scenarios:

• Encryption in transit

• Encryption at rest (EAR)

   

Encryption in transit    

Encryption in transit refers to data that's protected while it's being transferred between systems, such as between your browser and Nila’s servers, or between Nila and other services through integrations.

Encrypting data during transmission helps prevent attacks such as man-in-the-middle attacks, where malicious actors attempt to intercept or alter data while it's moving across networks.

Learn more about encryption in transit.

Encryption at rest    

Encryption at rest refers to data that's encrypted while it's stored on servers, whether on disks, databases, or other storage media.

By encrypting stored data in addition to encrypting data during transit, Nila provides an additional layer of protection against risks such as server compromise, unauthorized access, or potential data leaks.

Encryption is implemented at the application layer using the AES-256 algorithm. AES-256 is a symmetric encryption standard that uses 128-bit blocks and 256-bit keys.

The key used to convert plaintext data into encrypted data is called the Data Encryption Key (DEK). The DEK itself is encrypted using a Key Encryption Key (KEK) to add another layer of security.

All encryption keys are generated and managed through Zoho’s in-house Key Management Service (KMS).

Learn more about our KMS.

What data does Nila encrypt?    

Nila encrypts sensitive application data as well as personally identifiable information (PII), such as email addresses and IP addresses.

Data stored or processed within Nila is protected through encryption mechanisms to ensure secure storage and handling.

Learn more about encryption and our KMS.

Full disk encryption    

In addition to application-layer encryption, full disk encryption is implemented in Zoho’s EU (Europe), IN (India), and AU (Australia) data centers to provide additional protection for stored data.