In order to help reduce customer exposure to data breaches, Optimizely encrypts most product data at rest. This provides an extra layer of protection for much of your Optimizely-stored data.

However, some data sent to our backend systems, such as our CRM and analytics platforms, is not encrypted at rest. For example, neither analytics data collected about collaborators’ use of the product, nor analytics data collected about the performance of the Web Experimentation Javascript client, are encrypted.

This article describes Optimizely's encryption at rest practices for our subprocessors. If you need more information, contact your Customer Success Manager.