On this page
COMPLIANCE AND SECURITY
Encryption at rest
Encryption at rest is the practice of storing data in encrypted form on disks, databases and backups, so that anyone who obtains the storage without the keys cannot read it. It complements encryption in transit (TLS) and is a baseline expectation in data protection law and in security questionnaires.
piiaudit logdata processing agreement
Why it matters
The most common data breach is not a live hack but a lost backup, a misconfigured bucket or a decommissioned disk. Encryption at rest neutralises those. Field-level encryption goes further: even someone with database access sees ciphertext for personal fields.
In VGraple CRM
Personal fields (names, phone numbers, emails, addresses and similar) are encrypted at field level with keys kept outside the database, with separate blind-index columns so search and deduplication still work; storage volumes and backups are encrypted as well. The security page has the details.