Plan requirement
| Subscription | Suite Enterprise or higher, Support Enterprise |
| Also required | Advanced Data Privacy and Protection |
| Access | Admin |
An add-on for organisations with stricter obligations. What it covers, and how to tell whether you need it.
What it brings
- Advanced encryption, with the keys held in your own key management system.
- Deletion schedules with conditions on last update, brand, form, type, requester, organisation, tags and custom fields, and up to ten active per kind of data where an account without the add-on runs one.
- Access logs, for demonstrating who reached what.
- Data masking and automatic redaction of sensitive information, including in call transcriptions.
Who it is for
Organisations with obligations beyond ordinary data protection: healthcare, finance, public sector, or anybody whose customers impose security requirements contractually.
If nobody has ever sent you a security questionnaire, you probably do not need it.
The test
Is there a requirement you cannot meet with the standard controls, written down somewhere by a regulator, an auditor or a customer's contract?
If yes, this is likely the answer. If the reasoning is "it sounds safer", the standard controls plus good habits get you further for less.
It does not replace the basics
Encryption does not help if a former colleague still has an active account, and audit capability does not help if nobody reads it. The add-on raises the ceiling; it does not raise the floor.
Two-factor authentication and proper offboarding remain the highest-value work.
It is a project, not a purchase
Key management in particular brings responsibilities: who holds the keys, what happens when they rotate, what happens if they are lost. That needs deciding before it is switched on.
Talk to us first
Whether this fits depends on your obligations and your setup. Ask pluscloud support and we will go through what you need to meet.
Comments
0 comments
Article is closed for comments.