Is the kdb database encryptyed at some level? We have a security review regardin

Is the kdb database encryptyed at some level? We have a security review regarding storing financial data(GLBA data - pertaining to customers) in appian and the security review team needs to know if the data is stored in a encrypted format. Is there any detailed level documentation available on this other than what is already in the forum...

OriginalPostID-94648

OriginalPostID-94648

  Discussion posts and replies are publicly visible

  • I guess the data you are storing in a typical db like oracle or sql server, its the applicaton owner responsibilty to encrypt and decrypt. the kdb files are something that resides on the appian jboss servers and now one can access to look other than admins of the box.
    The process variables data are not encrypted and could use some sort of algorithm not to have it directly understood when application admins monitor the process.
    From my knowledge, Appian does not by default encrypt anything for you.
    The .kdb files are kind of cryptic as you cant just open in notepad and read it.
    Hope this helps to some extent.
  • K stores the data in it's own proprietary format that is not encrypted. Appian best practice recommends using disk-level encryption to protect the data stored.