Concept / Term · Established

Encryption at rest / in transit

Two places data needs protecting

What does Encryption at rest / in transit mean?

At rest means stored data is encrypted on disk; in transit means it is encrypted while moving across the network. Buyers and auditors will ask about both.

Category: Security & Access
Maturity: Established
Last reviewed: 2026-08-30

Keep exploring

API KeyA secret code that identifies and authorises your app when it calls an API. It should be kept private, like a password.
OAuthThe standard that lets an app access your data on another service without seeing your password. It is the foundation of 'Sign in with Google' and similar sign-in buttons.
SSOLogging in once to gain access to many connected apps without re-entering your details.
MFA / 2FARequiring a second proof of identity beyond the password, usually a code from a phone or an authenticator app.
Pen TestAn authorised simulated attack on your system by security specialists, to find weaknesses before someone else does. Often required before an enterprise contract.
Vulnerability / CVEA known security weakness. CVE is the public catalogue that gives each one a reference number so everyone can track it.
GDPR / Data ProtectionThe rules on handling personal data: what you may collect, why, how long you keep it and what rights people have over it. Non-compliance carries real financial penalties.
Zero TrustA security model that treats every request as untrusted regardless of where it comes from, rather than assuming anything inside the network is safe.

← View all 18 Security & Access terms