Data at Rest — stored data encryption. Data in Transit — moving data encryption.
Data at Rest:
Data at Rest:
Database: AES-256 encryption
Files: Full disk encryption
Backups: Encrypted storage
(Stored data encrypted)
Data in Transit:
Data in Transit:
HTTPS: TLS 1.3
VPN: Encrypted tunnel
API: TLS encryption
(Moving data encrypted)
Key differences: