Oredra Security Library

Data protection security questionnaire answers

Encryption, retention, deletion, and how customer information is protected.

← All security questionnaire questions

Data protection

Questions customers commonly ask.

Data protection

Is customer data encrypted in transit?

The question is asking whether information is protected while moving between systems, users, or services. Verify the actual protocols and the scope of the data flows before answering. Do not assume that using a modern cloud platform means every transmission path is covered.

Understand this question

Data protection

Is customer data encrypted at rest?

Encryption at rest concerns stored data. Before answering, identify where customer information is stored and confirm which storage systems, databases, devices, and backups are actually encrypted.

Understand this question

Data protection

How long do you retain customer data, and how is it deleted?

Describe the actual retention and deletion practice for the data in scope. Be especially careful with fixed timelines, backups, legal or contractual retention, and copies held by subprocessors because those details can make a simple answer inaccurate.

Understand this question

Not sure what your company can answer?

Check your questionnaire readiness in about three minutes.

See which common areas are clear, scattered, uncertain, or simply not something your company does today. It is not a compliance score.

Take the free readiness check