Data security - encryption

2721
1
Jump to solution
03-14-2017 09:41 AM
FriedaL
New Contributor II

I'd like to know more about how data collected with survey123 is secured or how I could improve security. I found details on authentication but was wondering about encryption. Is there a way to encrypt data on the phone? Is the data generally encrypted on the server?

1 Solution

Accepted Solutions
JamesTedrick
Esri Esteemed Contributor

Hi Frieda,

With regards to security of form information:

On Mobile Devices: Survey123 currently does not do any encryption of it's own and relies on the encryption supplied by the phone.  In general, modern iOS (version 3+) and Android (version 6+) phones encrypt the file systems (all files) of the device when 'at rest', i.e. when powered off.  We have an enhancement request to support encryption, but it has not yet appeared as a high user priority.

On Server Storage: Survey123 data can be sent to either an ArcGIS Online organization or ArcGIS Enterprise (on premises) implementation.  For additional security information about both, please refer to http://trust.arcgis.com 

  - ArcGIS Online: Data access control is secured via ArcGIS online's authentication.  Data is not encrypted at rest.

  - ArcGIS Enterprise: Hosted Feature Services (default table) do not encrypt data at rest; Survey123 can, via a ArcGIS Server Service, write to an enterprise database, whose encryption status is controlled by the System Administrator and Database Administrator.

In addition to your questions of on device and on server, let me also address data in transit (from mobile application to server) - if the destination server supports SSL, the data transmission is encrypted and sent via SSL.

Survey123 is available as a template in AppStudio; a custom version can be modified to support encryption of the data or to delete a survey once successfully submitted.

View solution in original post

1 Reply
JamesTedrick
Esri Esteemed Contributor

Hi Frieda,

With regards to security of form information:

On Mobile Devices: Survey123 currently does not do any encryption of it's own and relies on the encryption supplied by the phone.  In general, modern iOS (version 3+) and Android (version 6+) phones encrypt the file systems (all files) of the device when 'at rest', i.e. when powered off.  We have an enhancement request to support encryption, but it has not yet appeared as a high user priority.

On Server Storage: Survey123 data can be sent to either an ArcGIS Online organization or ArcGIS Enterprise (on premises) implementation.  For additional security information about both, please refer to http://trust.arcgis.com 

  - ArcGIS Online: Data access control is secured via ArcGIS online's authentication.  Data is not encrypted at rest.

  - ArcGIS Enterprise: Hosted Feature Services (default table) do not encrypt data at rest; Survey123 can, via a ArcGIS Server Service, write to an enterprise database, whose encryption status is controlled by the System Administrator and Database Administrator.

In addition to your questions of on device and on server, let me also address data in transit (from mobile application to server) - if the destination server supports SSL, the data transmission is encrypted and sent via SSL.

Survey123 is available as a template in AppStudio; a custom version can be modified to support encryption of the data or to delete a survey once successfully submitted.