Skip to main content
menu-icon.png
 

 

x
Optimizely Knowledge Base

How Optimizely encrypts customer data at rest

  1. Last updated
  2. Save as PDF

Skip Ahead

  1. Definitions
  2. Data stores encrypted at rest
  3. Data stores not encrypted at rest
 
 
 
relevant products:
  • Optimizely Web Experimentation
  • Optimizely Web Personalization
  • Optimizely Web Recommendations
  • Optimizely Full Stack
THIS ARTICLE WILL HELP YOU:
  • Understand how Optimizely helps protect your data in the event of a data breach

In order to help reduce customer exposure to data breaches, Optimizely encrypts most product data at rest. This provides an extra layer of protection for much of your Optimizely-stored data.

However, some data sent to our backend systems, such as our CRM and analytics platforms, is not encrypted at rest. For example, neither analytics data collected about collaborators’ use of the product, nor analytics data collected about the performance of the Web Experimentation Javascript client, are encrypted.

This article describes Optimizely's encryption at rest practices for our subprocessors. If you need more information, contact your Customer Success Manager.

Definitions

  • Product data is data submitted to Optimizely, such as experiment definitions and collaborator contact information.

  • Collaborator analytics data refers to analytics data collected about collaborators' use of the product.

  • Performance analytics data is limited performance data, such as latency, collected about the Web Experimentation client.

  • Visitor data refers to data concerning the characteristics and activities of site visitors collected by Optimizely.

Data stores encrypted at rest

Subprocessor

  

Type of data

Product Data

Visitor Data

Collaborator Analytics Data

Performance Analytics Data

Amazon Web Services, Inc.

✔

✔

✔

✔

Google, Inc.

✔

      

Zendesk, Inc.

✔

      

Auth0, Inc.

✔

      

Chart.io

✔

      

Castle Intelligence, Inc.

✔

      

Heroku, Inc. (a Salesforce company)

✔

      

Pendo, Inc.

    

✔

  

Segment.io, Inc.

    

✔

  

Looker

✔

  

✔

  

Slack

        

Sentry.io

✔

  

✔

  

Marketo

    

✔

  

Data stores not encrypted at rest

Subprocessor

 

Type of data

Product Data

Visitor Data

Collaborator Analytics Data

Performance Analytics Data

Salesforce

✔

  

✔

  

SendGrid, Inc.

✔

  

Customer data is processed by Sendgrid only to send emails to collaborators and track email analytics. It is not stored for more than 30 days.

  

New Relic

    

✔

  

Amplitude

    

✔