Encryption

Introduction

Data encryption is a cornerstone of EveryAnswer's security infrastructure, ensuring that all user data remains protected during transmission and storage. This documentation outlines the specific encryption methods and standards used by EveryAnswer to safeguard your data.

Encryption Standards

TLS/SSL Encryption for Data in Transit

EveryAnswer employs TLS (Transport Layer Security) encryption to secure data transmitted through the platform. This encryption ensures that data cannot be intercepted or tampered with during transit.

• Protocol Version: TLS 1.2 or higher
• Cipher Suites: ECDHE-RSA with AES-GCM or ChaCha20-Poly1305
• Key Exchange: Elliptic Curve Diffie-Hellman (ECDH)
• Certificate: 2048-bit RSA, SHA-256 signature

To ensure optimal security, please refer to our system requirements and supported browsers page for information on compatible systems and browsers that support our encryption standards.

256-bit AES Encryption for Data at Rest

For data stored within the platform, EveryAnswer utilizes 256-bit AES (Advanced Encryption Standard) encryption. This industry-standard encryption method is widely recognized and trusted for its robustness.

• Key Length: 256-bit
• Mode of Operation: GCM (Galois/Counter Mode)
• Key Management: Secure key generation using CSPRNG, regular key rotation
• Initialization Vector (IV): Unique per encryption operation

Citation and Storage

Encrypted Storage for Citation Files

Files retained for citation purposes are securely stored using the same 256-bit AES encryption standard. This ensures that even archived files are protected from unauthorized access, maintaining the highest levels of security across all data stored within EveryAnswer.

Integration with Security Infrastructure

While this document focuses on encryption, it's important to note that EveryAnswer's commitment to data security extends beyond these measures. The platform offers extensive privacy controls and access control & authentication features that work in conjunction with encryption to provide a comprehensive security solution.

Summary

EveryAnswer employs robust encryption methods to ensure the security of user data:

• TLS/SSL encryption protects data in transit
• 256-bit AES encryption secures data at rest
• Consistent encryption applied to all stored data, including citation files

This multi-layered encryption approach forms a critical part of EveryAnswer's overall security infrastructure, providing strong protection for all data within the platform.