Encryption is used to protect sensitive information by converting readable data into an unreadable format. Only authorized systems with the appropriate keys can decrypt and access the original data. This process helps ensure that information remains secure from unauthorized access or interception.
In Vani, encryption is applied in two key scenarios:
Encryption in transit
Encryption at rest (EAR)
Encryption in transit refers to data that's protected while it's being transferred between systems, such as between your browser and Vani’s servers, or between Vani and other services through integrations.
Encrypting data during transmission helps prevent attacks such as man-in-the-middle attacks, where malicious actors attempt to intercept or alter data while it's moving across networks.
Learn more about encryption in transit.
Encryption at rest refers to data that's encrypted while it's stored on servers, whether on disks, databases, or other storage media.
By encrypting stored data in addition to encrypting data during transit, Vani provides an additional layer of protection against risks such as server compromise, unauthorized access, or potential data leaks.
Encryption is implemented at the application layer using the AES-256 algorithm. AES-256 is a symmetric encryption standard that uses 128-bit blocks and 256-bit keys.
The key used to convert plaintext data into encrypted data is called the Data Encryption Key (DEK). The DEK itself is encrypted using a Key Encryption Key (KEK) to add another layer of security.
All encryption keys are generated and managed through Zoho’s in-house Key Management Service (KMS).
Vani encrypts sensitive application data as well as personally identifiable information (PII), such as email addresses and IP addresses.
Data stored or processed within Vani is protected through encryption mechanisms to ensure secure storage and handling.
Learn more about encryption and our KMS.