<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.appian.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Encryption/Decryption of Data when Appian is only one system in the mix</title><link>https://community.appian.com/discussions/f/integrations/14463/encryption-decryption-of-data-when-appian-is-only-one-system-in-the-mix</link><description>Hello All, 
 We have a situation where our application architecture, at a high level is as follows: 
 
 Something (system or person) makes a call to an internal (proprietary) API. 
 The (internal) API takes the inputs, runs some stored procs (internal</description><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>RE: Encryption/Decryption of Data when Appian is only one system in the mix</title><link>https://community.appian.com/thread/65006?ContentTypeID=1</link><pubDate>Tue, 05 Mar 2019 05:32:59 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:6ac44a04-3d52-4eb0-bfa0-208aadf09d4c</guid><dc:creator>Stefan Helzle</dc:creator><description>Hi Dylan, we built an application for management of medical practices including sensitive medical data. For each patient we create a group and only people in this group have access to any sensitive data. By default this group has no members. To gain access there is a process which grants access for 24 hours and writes to an audit log. To separate sensitive data we implemented a hashed keying method so there is no direct shared key between the tables.&lt;br /&gt;
&lt;br /&gt;
So restricting access in Appian is pretty simple. The question is, do you really need to encrypt data on DB level?&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>