> For the complete documentation index, see [llms.txt](https://docs.neevcloud.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.neevcloud.com/neevcloud-products/security/data-encryption-overview.md).

# Data Encryption Overview

NeevCloud ensures all data in transit is encrypted. For data at rest, NeevCloud provides the option to create encrypted storage volumes, giving you full control over your encryption posture.

### Encryption in Transit

All NeevCloud services are served over **HTTPS (TLS 1.2 / 1.3)** with certificates from a globally trusted Certificate Authority. This covers the Dashboard, API endpoints, Object Storage, and the Customer Portal. No action is required — encryption in transit is always enabled by default.

***

### Encryption at Rest

NeevCloud offers two volume types for block storage:

| Volume Type      | Encryption        | Use Case                                                                    |
| ---------------- | ----------------- | --------------------------------------------------------------------------- |
| **Default/NVMe** | Not encrypted     | General-purpose workloads where platform-level encryption is not required   |
| **Encrypted**    | AES-256 encrypted | Workloads handling sensitive or regulated data requiring encryption at rest |

When you select the **Encrypted** volume type during volume creation, all data written to that volume is automatically encrypted using **AES-256** at the platform level. Encryption and decryption happen transparently — no setup or key management is required from your side.

{% hint style="info" %}
**How to enable:** While [creating a volume](/neevcloud-products/volumes/create-a-volume.md) from the Dashboard, simply choose the **Encrypted** volume type. Your data will be encrypted at rest automatically.
{% endhint %}