Encrypting data
ServiceNow provides support for three types of encryption. Two occur within the server, and the data is decrypted before it leaves the instance, whereas Edge Encryption ensures data is always protected outside of the customer's network. The three types of encryption are as follows:
Full disc encryption protects a disk if it is physically stolen from the ServiceNow data center. The instance itself is unaware of any differences to a normal operating environment.
Field and attachment encryption stores encrypted data in the database. This provides a level of protection against a malicious database administrator. It is decrypted using an encryption key stored on and controlled by the instance.
Tip
These two methods are different forms of protecting data at rest. All communication with the instance occurs over HTTPS. This means that all the data is also secured in transit, but in both cases, the instance can work with the unencrypted data.
Edge Encryption uses a gateway sitting in the...
