---
title: "Expedient Cloud Object Storage Encryption and Regulatory Compliance"
slug: "cloud-object-storage-encryption-and-regulatory-compliance"
description: "This KB details the encryption methodologies employed by Expedient Cloud Object Storage as well as any compliance with any regulatory bodies."
tags: ["encryption", "compliance", "cloud object storage"]
updated: 2021-05-21T13:26:31Z
published: 2021-05-21T13:26:31Z
canonical: "kb.expedient.com/cloud-object-storage-encryption-and-regulatory-compliance"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.expedient.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Cloud Object Storage Encryption and Regulatory Compliance

## Encryption
Expedient's Cloud Object Storage platform leverages AES256 encryption methods to encrypt all data at rest. This configuration is enabled by default, requiring no action on your part. A shared encryption key is utilized across all data stored within the system. If desired, you may manually override the default encryption levels, providing a key of your own via the S3 protocol. 

Data is also encrypted in flight as all S3 API commands leverage HTTPS (TLS 1.2). This ensures that data remains secure while it is being transferred between a client system and the Cloud Object Storage platform.

## Regulatory Compliance
The technology powering Expedient's Cloud Object Storage has achieved multiple regulatory certifications and compliance ratings. The platform is Common Criteria EAL2 certified as well as FIPS140-2 Level 1 validated. These attestitions involve a review and certifcation of the crypographic methodoligies utilized and are a 'gold standard' for data security.