jsn / ServiceNow, simplified.
AustraliaREFERENCE GUIDE

Encryption

On this page

Encryption

Protect your sensitive data and stay compliant with regulatory requirements and standards.

<table id=“table_vcy_yrq_dsb” class=“nav-card”><tbody><tr><td>

Key Management Framework[Omitted image “bus-security.svg”] Alt text: Key Management

Use the Key Management Framework (KMF) to fully customize and manage how cryptographic operations are performed on your ServiceNow instance.

</td><td>

Field Encryption[Omitted image “bus-security.svg”] Alt text: Field Encryption

Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.

</td><td>

Field Encryption Enterprise[Omitted image “bus-security.svg”] Alt text: Field Encryption Enterprise

Use Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.

</td></tr><tr><td>

Cloud Encryption[Omitted image “bus-cloud.svg”] Alt text: Cloud Encryption

Encrypt your instance database using block encryption, along with enhanced key management.

</td><td>

Platform Encryption entitlement bundle[Omitted image “ind-shopping-cart.svg”] Alt text: Platform Encryption Entitlement Bundle

Upgrade to unlimited-use Field Encryption Enterprise, Cloud Encryption, and Database Encryption.

</td><td>

Full Disk Encryption (FDE)[Omitted image “bus-server.svg”] Alt text: Full disk encryption

Full disk encryption applies encryption to the entire storage system within the database server only. Because this is the only customer data-storing component.

</td></tr><tr><td>

Edge Encryption[Omitted image “bus-server.svg”] Alt text: Edge Encryption

Encrypts sensitive data on your company premises before sending data over the internet to your ServiceNow instance. Data remains encrypted at rest on the instance.

</td><td>

Certificates[Omitted image “bus-get-certified.svg”] Alt text: Certificates

Use certificates to establish secure connections and validate signatures.

</td><td>

Database Encryption[Omitted image “bus-database.svg”] Alt text: Database Encryption

Encrypt all stored data in real-time, providing protection for data online and offline with no loss of functionality.

</td></tr></tbody> </table>- Key Management Framework
Use the Key Management Framework (KMF) to generate, exchange, store, use, and replace the cryptographic keys used to encrypt and decrypt sensitive data on your ServiceNow instance. - Certificates
Your instance requires certificates to establish secure connections and validate signatures. - Field Encryption
Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption. - Column Level Encryption
Column Level Encryption permits and denies access to encrypted data based on user role. Column Level Encryption includes basic key management using encryption modules. - Cloud Encryption with Key Management
ServiceNow® Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow® Platform Encryption subscription bundle. - Full disk encryption
Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection. - Edge Encryption
ServiceNow® Edge Encryption ™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest. - Database Encryption
ServiceNow® offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.

Keep exploring.

Find another answer, or bring this documentation into your own tools.