---
title: Encryption
slug: privacy-and-security-shield-lab/encryption
docTags: 
createdAt: 2024-01-26T13:31:54.311Z
---

### Data in transit [#in-transit](#) 

All data in transit between Platform and any external component is conducted over secure, encrypted connections using HTTPS [TLS v1.2](https://datatracker.ietf.org/doc/html/rfc5246).

In general, data is brought into Platform in three ways:

- [Data collection](https://experienceleague.adobe.com/docs/experience-platform/collection/home.html?lang=en) capabilities allow websites and mobile applications to send data to the Platform Edge Network for staging and preparation for ingestion.
- [Source connectors](https://experienceleague.adobe.com/docs/experience-platform/sources/home.html?lang=en) stream data directly to Platform from Adobe Experience Cloud applications and other enterprise data sources.
- Non-Adobe ETL (extract, transform, load) tools send data to the [batch ingestion API](https://experienceleague.adobe.com/docs/experience-platform/ingestion/batch/overview.html?lang=en) for consumption.

After data has been brought into the system and [encrypted at rest](https://experienceleague.adobe.com/docs/experience-platform/landing/governance-privacy-security/encryption.html?lang=en#at-rest), it can then be enriched by Platform services and brought out of the system in the following ways:

- [Destinations](https://experienceleague.adobe.com/docs/experience-platform/destinations/home.html?lang=en) allow you to activate data to Adobe applications and partner applications.
- Native Platform applications such as [Customer Journey Analytics](https://experienceleague.adobe.com/docs/analytics-platform/using/cja-overview/cja-overview.html?lang=en) and [Adobe Journey Optimizer](https://experienceleague.adobe.com/docs/journey-optimizer/using/ajo-home.html?lang=en) can also make use of the data.

### Data at rest [#at-rest](#) 

Data that is ingested and used by Platform is stored in the data lake, a highly granular data store containing all data managed by the system, regardless of origin or file format. All data persisted in the data lake is encrypted, stored, and managed in an isolated [Microsoft Azure Data Lake Storage](https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-introduction) instance that is unique to your organization.

For details on how data at rest is encrypted in Azure Data Lake Storage, see the [official Azure documentation](https://learn.microsoft.com/en-us/azure/storage/common/storage-service-encryption).