Data Privacy & Encryption

How Rapid BI Catalog protects your data at rest, and what you need to back up.

EncryptionPrivacySecurity

Rapid BI Catalog encrypts your data at rest. Your data is protected by an encryption key held on the server, so there is nothing extra for you to manage day to day — but you must back up your application data securely (see below).

Encryption at Rest

Everything Rapid BI Catalog stores is encrypted at rest. Temporary files created while documentation is being generated are also encrypted and securely deleted when processing finishes.

What Is Not Encrypted

For operability, log files are stored as plain text so administrators can read them directly:

  • Execution logs — file-processing and job output.
  • Troubleshooting logs — diagnostic output (sensitive values are sanitized).
  • Audit logs — security and compliance events (tamper-evident).

See Logs for what each log contains and who can access it.

Back Up Your Data Securely

If your only copy is lost, encrypted data cannot be recovered
Because your data is encrypted with a key held on the server, a backup is only useful together with that server's application data. Back up your application data securely and keep it separate from the server — if the only copy is lost, the encrypted data cannot be recovered.

Follow Backup & Disaster Recovery for exactly what to back up and how to restore it. We also recommend installing Rapid BI Catalog on an encrypted volume for defense in depth.

Stored Credentials

Credentials you enter — Tableau Connected App secrets, access tokens, and database and email passwords — are encrypted at rest along with the rest of your data.

Next Steps