Data processing

Data protection in motion

Data protection at rest

Admins can configure encryption-at-rest (EAR) to encrypt uploaded content. When a user downloads content from the server, server-side EAR first decrypts the files and then transfers the files to the client in an unencrypted state. See File encryption.

The encryption key for EAR is saved in the aspera.conf configuration file on the node as cleartext. The customer is expected to take proper protection to avoid unauthorized access.