{
  "schemaVersion": "1.0",
  "entityFamily": "modules",
  "entityType": "DefinedTerm",
  "entityId": "modules:87",
  "canonicalUrl": "https://babadook.tech/modules/encryption-key-management",
  "machineBaseUrl": "https://babadook.tech/ai/modules/encryption-key-management",
  "name": "Encryption & Key Management",
  "aliases": [],
  "summary": "End-to-end encryption with AES-256-GCM at rest, TLS 1.3 in transit, field-level PII encryption, and support for customer-managed encryption keys (CMEK).",
  "description": [
    "End-to-end encryption with AES-256-GCM at rest, TLS 1.3 in transit, field-level PII encryption, and support for customer-managed encryption keys (CMEK)."
  ],
  "sections": [
    {
      "id": "encryption-at-every-layer-9c0cdf83-73fd-4a2f-8335-f48f2fa03563",
      "heading": "encryption-at-every-layer",
      "body": [
        "Encryption at Every Layer Encryption & Key Management provides defense-in-depth across all DXP data. AES-256-GCM encryption at rest protects stored data. TLS 1.3 encrypts all data in transit. Field-level encryption applies additional encryption to PII fields — so even database access doesn't expose sensitive data. Customer-managed encryption keys (CMEK) give enterprise customers full control over their encryption keys via AWS KMS, Google Cloud KMS, or Azure Key Vault. DXP never stores or has access to plaintext customer keys."
      ],
      "specifications": [],
      "relationships": [],
      "media": [],
      "children": [
        {
          "id": "data-viz-1",
          "heading": "data Viz",
          "body": [],
          "specifications": [],
          "relationships": [],
          "media": [],
          "children": [],
          "sourceBlockType": "unsupported"
        }
      ],
      "sourceBlockType": "content_block",
      "sourceBlockId": "9c0cdf83-73fd-4a2f-8335-f48f2fa03563"
    },
    {
      "id": "encryption-specifications-3c51574c-2e51-4074-ba67-355f7c511c99",
      "heading": "Encryption Specifications",
      "body": [],
      "specifications": [
        {
          "label": "At Rest",
          "value": "AES-256-GCM with automatic key rotation",
          "group": "spec Items"
        },
        {
          "label": "In Transit",
          "value": "TLS 1.3 with perfect forward secrecy",
          "group": "spec Items"
        },
        {
          "label": "Field Level",
          "value": "Per-field encryption for PII with separate keys",
          "group": "spec Items"
        },
        {
          "label": "CMEK",
          "value": "AWS KMS, Google Cloud KMS, Azure Key Vault",
          "group": "spec Items"
        },
        {
          "label": "FIPS",
          "value": "FIPS 140-2 validated cryptographic modules",
          "group": "spec Items"
        }
      ],
      "relationships": [],
      "media": [],
      "children": [],
      "sourceBlockType": "product_specification",
      "sourceBlockId": "3c51574c-2e51-4074-ba67-355f7c511c99"
    },
    {
      "id": "features-3",
      "heading": "features",
      "body": [
        "cmek: true",
        "tls 13: true",
        "aes 256: true",
        "field level: true"
      ],
      "specifications": [],
      "relationships": [],
      "media": [],
      "children": [],
      "sourceBlockType": "features"
    }
  ],
  "specifications": [],
  "claims": [],
  "relationships": [
    {
      "type": "products",
      "targets": [
        {
          "id": "83",
          "family": "products",
          "name": "DXP",
          "slug": "dxp",
          "canonicalUrl": "https://babadook.tech/products/dxp",
          "relationship": "products"
        }
      ]
    },
    {
      "type": "capabilities",
      "targets": [
        {
          "id": "84",
          "family": "capabilities",
          "name": "Enterprise Security",
          "slug": "enterprise-security",
          "canonicalUrl": "https://babadook.tech/capabilities/enterprise-security",
          "relationship": "capabilities"
        }
      ]
    },
    {
      "type": "sub_modules",
      "targets": [
        {
          "id": "37",
          "family": "sub-modules",
          "name": "Security & Compliance",
          "slug": "security-compliance",
          "canonicalUrl": "https://babadook.tech/sub-modules/security-compliance",
          "relationship": "sub_modules"
        }
      ]
    }
  ],
  "authors": [],
  "media": [],
  "regulatoryContext": {
    "exportControlAndLicensingReviewRequired": false
  },
  "language": "en",
  "receipt": {
    "sourceBlockCount": 4,
    "projectedBlockCount": 4,
    "sourceValueCount": 18,
    "projectedValueCount": 18,
    "sourceRelationshipCount": 3,
    "projectedRelationshipCount": 3,
    "sourceClaimCount": 0,
    "projectedClaimCount": 0,
    "unknownBlockTypes": [],
    "omittedFields": [],
    "missingValuePaths": [],
    "invalidClaims": [],
    "complete": true
  },
  "contentHash": "247dbacf4683af35feff8661dae9d6fdd7192a1b02cf3e45d6237251a102bd3a"
}