Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Encryption

Protect your sensitive data and stay compliant with regulatory  requirements and standards.

Key Management FrameworkKey Management](platform-encryption/understanding-kmf.md) [Use the Key Management Framework \(KMF\) to fully customize and manage how cryptographic operations are performed on your ServiceNow instance.Field EncryptionUse Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.Field Encryption EnterpriseUse Field Encryption to permit and deny access to encrypted data based on user role. Field Encryption includes basic key management using encryption modules.Cloud EncryptionEncrypt your instance database using block encryption, along with enhanced key management.Platform Encryption entitlement bundleUpgrade to unlimited-use Field Encryption Enterprise, Cloud Encryption, and Database Encryption.Full Disk Encryption \(FDE\)Full disk encryption](full-disk-encryption.md) [Full disk encryption applies encryption to the entire storage system within the database server only. Because this is the only customer data-storing component.Edge EncryptionEncrypts sensitive data on your company premises before sending data over the internet to your ServiceNow instance. Data remains encrypted at rest on the instance.CertificatesUse certificates to establish secure connections and validate signatures.Database EncryptionEncrypt all stored data in real-time, providing protection for data online and offline with no loss of functionality.

Key Management Framework
Use the Key Management Framework (KMF) to generate, exchange, store, use, and replace the cryptographic keys used to encrypt and decrypt sensitive data on your ServiceNow instance.
Certificates
Your instance requires certificates to establish secure connections and validate signatures.
Field Encryption
Protect encrypted data on your instance from unauthorized users, scripts, or system processes using Field Encryption.
Column Level Encryption
Column Level Encryption permits and denies access to encrypted data based on user role. Column Level Encryption includes basic key management using encryption modules.
Cloud Encryption with Key Management
ServiceNow® Cloud Encryption offers encrypted storage for the database using block encryption, along with enhanced key management. Cloud Encryption is available with the ServiceNow® Platform Encryption subscription bundle.
Full disk encryption
Full disk encryption (FDE) applies encryption to the entire storage system within the database server only, because this is the only customer data-storing component. FDE protects only against physical loss or theft of storage devices. When encrypted disk servers are powered on and providing data, the encryption provides no additional protection.
Edge Encryption
ServiceNow® Edge Encryption ™ encrypts sensitive data on your company premises before sending it over the Internet to your ServiceNow instance (encrypted in flight), where it remains encrypted at rest.
Database Encryption
ServiceNow® offers database encryption (DBE) and full-disk encryption methods for customers with statutory obligations for data protection which may require at-rest protection for all data.