Data Encryption in Camunda Cloud

Data is encrypted between the Zeebe Gateway and the client using TLS, and between the Zeebe Gateway and the Zeebe brokers using TLS.

Is data encrypted in ElasticSearch?

If not, are there any plans for encrypting data at rest in Camunda Cloud?

To quote here a colleague of mine:

User data stored in Zeebe, Operate, Tasklist, Optimise and Elasticsearch are all encrypted at rest with AES256 or in some rare cases with AES128 (legacy hardware) at the hardware layer.

Afaik we use the default disk decryption provided by google Default encryption at rest  |  Documentation  |  Google Cloud

1 Like