Secure your most sensitive data in the cloud

Apply strong cloud encryption to your sensitive data

Cloud encryption

As organizations like yours embrace cloud services, many are considering an additional layer of data protection to safeguard their sensitive data stored in the cloud. Although many of the top cloud services are built on highly secure platforms, your sensitive data can still be at risk of inadvertent or malicious exposure without this extra layer of protection. And if you are subject to data security or privacy regulations, strong encryption coupled with the proper management of your encryption keys can be a critical element of your compliance program.

Netskope provides advanced cloud encryption and key management technology, with the flexibility to integrate with your existing key management solutions as well as the encryption and key management capabilities of your cloud service providers. If you already have an on-premises, KMIP-compliant key management service (KMS), you can integrate with Netskope and maintain full control of your keys. If you are using a cloud service like Salesforce that provides encryption and a BYOK (“bring your own key”) option, Netskope can operate as a key broker between your on-premises KMS and your cloud service. You can also take full advantage of Netskope’s cloud-based encryption service to apply strong encryption selectively to your sensitive data across all of your cloud services, automatically and transparently to your end users.

Key Features

Strong encryption

Netskope protects your sensitive data with advanced encryption and key management. Our encryption uses the AES-256 cipher and we offer the choice of a cloud-based KMS with a FIPS 140-2 Level 3 certified hardware security module (HSM) or the option to integrate with your KMS to ensure the confidentiality and privacy of your data in the cloud.

  • Strong encryption using AES-256
  • Each file encrypted with a unique key
  • Highly secure, fault tolerant KMS with FIPS 140-2 Level 3 certified HMS, or option to integrate with your KMS
Your keys

Take full advantage of Netskope’s highly secure, fault-tolerant KMS in the cloud, or integrate Netskope with your on-premises, KMIP-compliant KMS so that you can maintain control of your encryption keys. For cloud services like Salesforce that support BYOK, Netskope can act as a key broker between your on-premises KMS and your cloud service.

  • Integrate with your on-premises, KMIP-compliant KMS
  • Broker keys between on-premises KMS and cloud services supporting BYOK
Protect data

Netskope Encryption can be applied to sensitive data at rest in sanctioned cloud services like Office 365 and Salesforce, regardless of when content was created or uploaded. It can also be applied in real time to content en route to any cloud service.

  • Protect data at rest in sanctioned cloud services
  • Secure data en route to or from any cloud service, whether sanctioned or unsanctioned
Selective encryption

You can apply Netskope Encryption based on detections from our advanced, enterprise DLP. This way, you accurately identify your most sensitive content for that extra layer of security. From there, you can take advantage of detailed, contextual information such as user, device, location, service, and activity to further tailor your cloud service encryption policies.

  • Control sensitive data in and en route to and from all cloud services
  • Use DLP to selectively encrypt your most sensitive content
  • Get highest degree of accuracy with fingerprinting, exact match, and more
  • Further target policies using context like user, group, device, service, and activity
Transparent to users

No security technology can be successfully deployed if it disrupts your end users or the cloud services they depend on. With Netskope Encryption, encryption and decryption operations happen automatically behind the scenes and in a way that’s transparent to your end users.

  • Transparently secure sensitive data
  • Automatically encrypt and decrypt cloud traffic

Cloud encryption in action

Learn how Netskope protects your sensitive data in the cloud with strong encryption

In this demo video, you’ll see how Netskope Encryption can be used to protect data stored in your sanctioned cloud services, and also how Netskope can automatically encrypt data being uploaded into any cloud service.



Take advantage of industry standards for encryption and key management to provide proven technology for your organization. Industry standards such as AES, FIPS, and KMIP have been thoroughly vetted, and support of these standards will assure interoperability across all of the components of your cloud encryption ecosystem.

Flexible architecture

Cloud services offer a range of options for encryption and key management, and you may also need to retain control of the keys used to encrypt your data in the cloud. The best cloud encryption solutions provide end-to-end encryption and key management, with options to integrate with the capabilities provided by your cloud services and your key management solutions.

Full coverage

As your organization adopts more cloud services over time, it is important that your encryption solution is flexible enough to support a range of cloud encryption use cases. Seek a solution that can encrypt data at rest in your sanctioned cloud services as well as one that can apply encryption in real time to data in transit to any cloud service.


Look for an encryption solution that allows you to create policies that selectively encrypt data based on the context surrounding the usage of your cloud services. Use DLP to accurately classify data, as well as information about the user, device, location, service, and activity to tailor your encryption policies.

Transparent to users

To successfully implement encryption for your cloud services, it is important to safeguard your data with strong encryption without negatively impacting the end user experience. Solutions that require changes in user behavior or disrupt the functionality of your cloud services will be met with resistance from your user community.

Trusted by leading companies

Netskope Encryption — data sheet

Learn how Netskope Encryption works to secure your data in sanctioned and unsanctioned cloud services.

Learn more

Netskope Cloud DLP — data sheet

Learn how Netskope’s single policy engine can protect you data across SaaS, IaaS, and web, whether accessed from users on premises, mobile, or remote and from a browser, mobile app, or sync client.

Learn more

Want to see Netskope in action?

Request a Demo