1. Administration and security
  2. Bring Your Own Key
  3. What Data is Encrypted by BYOK?

Every Anaplan model, including those in BYOK-encrypted workspaces, consists of structural information and production data.

  • Structural information consists of a model’s configuration settings and lists, with the exception of designated production lists. You can capture the latest state of a model's structural information by adding a revision tag.
  • Production data consists of cell values, users, workflow states, and the contents of designated production lists.

Learn which objects in a model are treated as structural information at Structural Information Reference.

When you encrypt a workspace with your own encryption key, all production data in models inside the workspace is encrypted. Structural information is not encrypted because it's stored outside the parent workspace.

Data is only encrypted when at rest, not when loaded into memory. When a model is in use, data is unencrypted and visible to authorized users in clear text. Use roles and selective access to control access to models and individual lists and roll-ups.