# Encryption related question

**URL:** <https://forum.8thwall.com/t/encryption-related-question/1244>\
**Category:** Technical Support\
**Tags:** security, hosting\
**Created:** [May 1, 2024, 8:55pm UTC](https://forum.8thwall.com/t/encryption-related-question/1244 "2024-05-01T20:55:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![lily\_hsiao](https://avatars.discourse-cdn.com/v4/letter/l/ac91a4/32.png) [@lily\_hsiao](https://forum.8thwall.com/u/lily_hsiao)\
**Post date:** [May 1, 2024, 8:55pm UTC](https://forum.8thwall.com/t/encryption-related-question/1244/1 "2024-05-01T20:55:10Z")

</div>

Hi,  
Thank you for your time.  
My client has some questions about the encryption aspect of how 8th wall handles (see questions below), but I didn’t find the answers on the website. Can you help me with these questions?  
Thank you!

- What encryption protocol is employed for data in motion? (Is it HTTPS, TLS 1.2, or another method?)
- What encryption method is utilized for data at rest? (For instance, AES-256, Transparent Data Encryption (TDE), etc.)
- Are auditing and logging turned on for all systems? (Application/infrastructure, logs/monitoring)

---

<div class="post-metadata">

**Author:** ![Pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.8thwall.com/pablo/32/55_2.png) [@Pablo](https://forum.8thwall.com/u/Pablo)\
**Post date:** [May 3, 2024, 10:09pm UTC](https://forum.8thwall.com/t/encryption-related-question/1244/2 "2024-05-03T22:09:41Z")

</div>

Hi @lily_hsiao our team will respond to this shortly, our team member who focuses on this is currently OOO.

---

<div class="post-metadata">

**Author:** ![TonyT](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.8thwall.com/tonyt/32/88_2.png) [@TonyT](https://forum.8thwall.com/u/TonyT)\
**Post date:** [May 7, 2024, 9:45pm UTC](https://forum.8thwall.com/t/encryption-related-question/1244/3 "2024-05-07T21:45:33Z")

</div>

Hi @lily_hsiao,

All 8th Wall infrastructure resides in AWS and follows architecture, configuration and security best practices. We leverage global infrastructure and highly available service configurations across many AWS regions.

Please refer to the following URLs related to privacy, data processing and operational measures:

> **[8th Wall | Privacy Policy](https://www.8thwall.com/privacy)**

> **[8th Wall | Data Processing Addendum](https://www.8thwall.com/dpa)**

> **[8th Wall | Technical and Organizational Measures](https://www.8thwall.com/toms)**

Specifically, 8th Wall hosting is powered by AWS CloudFront, a managed service with 600+ (and always growing) points of presence around the globe - AWS ensures the availability and security of their underlying hosting platform:

> **[Infrastructure security in Amazon CloudFront - Amazon CloudFront](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/infrastructure-security.html)**
>
> Learn how Amazon CloudFront isolates service traffic.

To answer your specific questions, HTTPS/TLS is used for encrypting data in motion, and various built-in AWS Storage encryption technologies are used for data at rest (things like S3 encryption, RDS encryption, etc) and yes, our infrastructure is monitored, audited and logged as appropriate based on the service.

---

<div class="post-metadata">

**Author:** ![lily\_hsiao](https://avatars.discourse-cdn.com/v4/letter/l/ac91a4/32.png) [@lily\_hsiao](https://forum.8thwall.com/u/lily_hsiao)\
**Post date:** [May 7, 2024, 9:46pm UTC](https://forum.8thwall.com/t/encryption-related-question/1244/4 "2024-05-07T21:46:58Z")

</div>

Thank you so much for your detailed answer!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/x8thwall/original/2X/9/9212a857458f1b03a6accb129e0f8cbea408e3e5.png) [@system](https://forum.8thwall.com/u/system)\
**Post date:** [July 2, 2024, 8:31pm UTC](https://forum.8thwall.com/t/encryption-related-question/1244/5 "2024-07-02T20:31:07Z")

</div>

This topic was automatically closed 4 days after the last reply. New replies are no longer allowed.
