Encryption in Zoho Creator

Encryption in Zoho Creator protects your application data both while it is stored and while it moves between systems. Understanding how it works helps you decide which fields need extra protection for sensitive or personal information.

Encryption at rest

Data stored on disk or in a database is encrypted using the AES-256 algorithm, with 256-bit encryption keys. Zoho Creator uses two layers of keys: a Data Encryption Key protects the data itself, and a Key Encryption Key protects that key in turn. An in-house key management service generates and maintains these keys.

Encryption in transit

Data moving between your browser, Zoho’s servers and any third-party integrations is encrypted, which helps guard against interception while it travels across networks.

Field level encryption

Some field types are encrypted automatically, including file upload, image, signature, audio and video fields. For other fields that hold sensitive or personally identifiable information, you can turn on the encrypt data field property. This makes sure the field’s data stays encrypted at rest across all storage and logging, including audit trails and backups.

Additional protection

Full disk encryption also runs across Zoho’s data centres as a further layer beyond this application level encryption.

Frequently asked questions

What encryption standard does Zoho Creator use for stored data?

AES-256, using a data encryption key that is itself protected by a key encryption key managed by Zoho’s key management service.

Do I need to do anything to encrypt file uploads or images?

No. Field types such as file upload, image, signature, audio and video are encrypted automatically. For other sensitive fields, enable the encrypt data property.

Need help?

Need help deciding which fields to encrypt in your Zoho Creator application? Contact support@thoughtlogik.com or see our Zoho custom app development services.