How Optimizely Experimentation encrypts customer data at rest

  • Updated
Relevant products:
  • Optimizely Web Experimentation
  • Optimizely Web Personalization
  • Optimizely Web Recommendations
  • Optimizely Feature Experimentation
This topic describes how to:
  • Understand how Optimizely Experimentation helps protect your data in the event of a data breach

To help reduce customer exposure to data breaches, Optimizely Experimentation encrypts most product data at rest. This provides an extra layer of protection for much of your Optimizely Experimentation-stored data.

However, some data sent to our backend systems, such as our CRM and analytics platforms, is not encrypted at rest. For example, neither analytics data collected about collaborators’ use of the product, nor analytics data collected about the performance of the Optimizely Web Experimentation Javascript client, are encrypted.

This article describes Optimizely Experimentation's encryption at rest practices for our subprocessors. If you need more information, contact your Customer Success Manager.

Definitions

  • Product data is data submitted to Optimizely Experimentation, such as experiment definitions and collaborator contact information.

  • Collaborator analytics data refers to analytics data collected about collaborators' use of the product.

  • Performance analytics data is limited performance data, such as latency, collected about the Web Experimentation client.

  • Visitor data refers to data concerning the characteristics and activities of site visitors collected by Optimizely Experimentation.

Data stores encrypted at rest

Subprocessor

  

Type of data

Product Data

Visitor Data

Collaborator Analytics Data

Performance Analytics Data

Amazon Web Services, Inc.

✔

✔

✔

✔

Google, Inc.

✔

      

Zendesk, Inc.

✔

      

Auth0, Inc.

✔

      

Chart.io

✔

      

Castle Intelligence, Inc.

✔

      

Heroku, Inc. (a Salesforce company)

✔

      

Pendo, Inc.

    

✔

  

Segment.io, Inc.

    

✔

  

Looker

✔

  

✔

  

Slack

        

Sentry.io

✔

  

✔

  

Marketo

    

✔

  

Data stores not encrypted at rest

Subprocessor

 

Type of data

Product Data

Visitor Data

Collaborator Analytics Data

Performance Analytics Data

Salesforce

✔

  

✔

  

SendGrid, Inc.

✔

  

Customer data is processed by Sendgrid only to send emails to collaborators and track email analytics. It is not stored for more than 30 days.

  

New Relic

    

✔

  

Amplitude

    

✔