PCI-DSS compliance: Is the submission data now encrypted?

Hi Support team,

Can you please advise if the data at rest is now encrypted when stored on the AWS or Google servers after you have attained PCI-DSS compliance in September 2018?

Cheers

Lindbergh

Please note that submission data is not encrypted by default unless you manually enable encryption in form. You may like to take a look at the following guide on how enable encryption in form:  https://www.jotform.com/help/344-Encrypted-Forms-and-How-to-Use-Them

Hope this helps.

Do get back to us if you have any questions.

Thanks for the response.

Hi Jotform Support,

Just a follow-up query here, just to clarify do you any disk-level encryption? i.e. in the event the disk containing our data is lost we have confidence that our data is not exposed. This would be different from file-level encryption which i assume is the "Encrypted Forms".

Hence for customers who don't enable encrypted forms how is their data protected when transferred to a backup tape etc. 

Let me forward your query to our backend team. We will get back to you as soon as we have any update on this. 

Hi,

We use Google and AWS servers for all data related transfers. They have a disk-level encryption by default on their disks. 

Thanks, this is heaps helpful.