T
Telblu

Security & Compliance

Encryption

Available today

Understand how Telblu protects organisational information while it is transmitted and stored.

Telblu protects customer data using encrypted communication between users and the platform, together with encryption provided by the managed backend for stored data.

Data in Transit

Communication between users and the Telblu platform is protected using HTTPS/TLS.

Data at Rest

Data stored by the managed backend is encrypted at rest.

Secure Communication

Authentication, API requests and application traffic use encrypted connections.

Managed Encryption

Encryption at rest is provided by the managed backend storage services.

Encryption Overview

Encryption is one of several security layers used throughout the platform.

Encryption works alongside authentication, session management, Role-Based Access Control, organisation isolation, Row-Level Security and audit logging. Each layer addresses a different part of the security model.

Authentication

Authorisation

Encryption

Database Protection

Audit Logging

Encryption protects data while other platform controls determine who can access it. Authentication and authorisation must succeed before any encrypted data is returned to a user.

Data in Transit

Communication between users and the Telblu platform is protected using HTTPS/TLS.

Encryption protects requests and responses while data travels between the browser and the platform.

Authentication, API requests and application traffic use encrypted connections.

Data at Rest

Data stored by the managed backend is encrypted at rest.

This protection applies to platform data stored within the managed database and storage services.

Encryption at rest helps protect stored organisational information.

Encryption Lifecycle

The diagram below shows how encryption protects data at each stage of a request.

User

HTTPS/TLS

Authentication

Application

Managed Database

Encrypted Storage

User

The user initiates a request from their browser.

HTTPS/TLS

The request is transmitted over an encrypted connection.

Authentication

The platform verifies the user's identity before processing the request.

Application

Business logic executes after authentication and authorisation succeed.

Managed Database

Data is read from or written to the managed backend database.

Encrypted Storage

Stored data is protected by managed encryption at rest.

What Encryption Protects

Encryption protects several categories of information within the platform.

User Authentication

Authentication requests are transmitted over encrypted connections.

Organisational Data

Department strategies, objectives, initiatives, KPIs, governance information and risks are stored using managed encryption.

API Communication

Application requests and responses are transmitted securely.

Uploaded Content

Platform content stored through the managed backend benefits from encryption at rest.

Encryption Responsibilities

Encryption is operated by the platform, while organisation administrators are responsible for access control and governance.

Managed PlatformCustomer Organisation
HTTPS/TLS communicationUser account management
Encryption at restUser permissions
Secure data transmissionInternal governance
Managed storage protectionRole assignment

Relationship to Platform Security

Encryption protects information while authentication and authorisation determine who may access it.

Authentication

Roles & Permissions

Organisation Isolation

Encryption

Protected Data

Current Encryption Capabilities

The table below lists the encryption capabilities available in the current Telblu deployment.

CapabilityStatus
HTTPS/TLSAvailable
Encryption at RestAvailable
Secure Authentication TrafficAvailable
Secure API CommunicationAvailable
Managed Storage EncryptionAvailable

Not Currently Documented

The following implementation details are not exposed within the current Telblu deployment and are not documented here.

  • Encryption algorithms
  • Customer-managed keys
  • Hardware Security Modules
  • Key Management Services
  • Bring Your Own Key (BYOK)
  • Customer-selectable encryption options

These implementation details are managed by the hosting platform and are not exposed within the current Telblu deployment.

Best Practices

Encryption protects data during transmission and storage

Information
Encryption is applied automatically to data in transit and data at rest. Users do not need to configure anything for this protection to apply.

Use Multi-Factor Authentication

Best Practice
Use Multi-Factor Authentication alongside encryption to provide additional account protection.

Encryption is one security layer

Note
Encryption is one layer of Telblu's security model and works together with authentication, authorisation, Row-Level Security and organisation isolation.