encryption

The process of encoding data so it can only be read by someone with the correct decryption key. Encryption at rest protects stored data (database files, backups, disk volumes). Encryption in transit protects data moving across a network (HTTPS, TLS). End-to-end encryption ensures only the sender and recipient can decrypt — not even the service provider.

When you'd see it: Security questionnaires, privacy policies, cloud storage configuration, compliance checklists.

Why it matters: Encryption is the technical foundation of data privacy. A stolen database of encrypted data is far less valuable than plaintext. Most compliance frameworks require encryption at rest and in transit as baseline controls.

Common mistakes: Thinking encryption at rest is sufficient. Data that is encrypted at rest but decrypted before processing in an insecure environment provides less protection than it appears.

Related TLS, data classification, access control, GDPR