Skip to main content
menu-icon.png

 

x
Optimizely Knowledge Base

How Optimizely encrypts customer data at rest

 
relevant products:
  • Optimizely X Web Experimentation
  • Optimizely X Web Personalization
  • Optimizely X Web Recommendations
  • Optimizely X Full Stack

THIS ARTICLE WILL HELP YOU:
  • Understand how Optimizely helps protect your data in the event of a data breach

In order to help reduce customer exposure to data breaches, Optimizely encrypts most product data at rest. This provides an extra layer of protection for much of your Optimizely-stored data.

However, some data sent to our backend systems, such as our CRM and analytics platforms, is not encrypted at rest. For example, neither analytics data collected about collaborators’ use of the product, nor analytics data collected about the performance of the Web Experimentation Javascript client, are encrypted.

This article describes Optimizely's encryption at rest practices for our subprocessors. If you need more information, contact your Customer Success Manager.

Definitions

  • Product data is data submitted to Optimizely, such as experiment definitions and collaborator contact information.

  • Collaborator analytics data refers to analytics data collected about collaborators' use of the product.

  • Performance analytics data is limited performance data, such as latency, collected about the Web Experimentation client.

  • Visitor data refers to data concerning the characteristics and activities of site visitors collected by Optimizely.

Data stores encrypted at rest

Subprocessor

 

Type of data

Product Data

Visitor Data

Collaborator Analytics Data

Performance Analytics Data

Amazon Web Services, Inc.

 

Google, Inc.

     

Zendesk, Inc.

     

Auth0, Inc.

     

Chart.io

     

Castle Intelligence, Inc.

     

Heroku, Inc. (a Salesforce company)

     

Pendo, Inc.

   

 

Segment.io, Inc.

   

 

Looker

 

 

Slack

       

Sentry.io

 

 

Marketo

   

 

Data stores not encrypted at rest

Subprocessor

 

Type of data

Product Data

Visitor Data

Collaborator Analytics Data

Performance Analytics Data

Amazon Web Services, Inc.

     

Salesforce

 

 

SendGrid, Inc.

 

Customer data is processed by Sendgrid only to send emails to collaborators and track email analytics. It is not stored for more than 30 days.

 

New Relic

   

 

Amplitude