Encrypt - data at rest ; sensitive information

[Anne Brock]

Filling out a security spreadsheet; they have two questions - one about does the product have encryption at rest? if so, details on encryption algorithm. The other question is if the product uses a database,  does it support database encryption? For both q's, they are asking if not supported now, when will it be supported? This is for Crowd, BitBucket, Bamboo and HipChat. I assume for Bitbucket IronGit can be used; for the others, looks like they don't have it in the product. But could they use the database encryption?

[evzijst · Accepted solution]

I cannot speak for all products, but Bitbucket Cloud does not currently apply encryption at rest.

While it is true that one could use something like IronGit to encrypt all repo contents, but that would make Bitbucket itself unable to read it, making pull requests and other services unusable.

[Anne Brock]

thanks... guess I don't understand IronGit! good to know.