1

I am using the audience manager to create contacts for the newsletters. Actually there is a concern that the fields like email/first name and last name as getting saved in audeince manager database as the readable text which will expose this PII data related to customers to the hackers. Is there any way with which I can encrypt the values of these fields in database without effecting my outbound email. Please help by your expert advice!

Thanks in advance!

Improve this question

1 Answer 1

Reset to default
2

I'm afraid that isn't possible at the moment. AM/OE support one-way encryption only. Meaning you can only use it for information that you don't want to be able to decrypt again (i.e. passwords)

Improve this answer
5
  • Hi peter, Thanks a lot for replying. Is there any chance for getting this implemented, as email being the PII data it could be risk of these getting hacked by users
    – TheBest_Happy
    Commented Aug 1, 2016 at 8:19
  • It's on the backlog, so there's a chance it will be added in the future. It's just a question of priorities.Just to be clear: do you still want the data to be visible within the UI too? So it's essentially only encrypted in the database and then decrypted whenever it is accessed?
    – Peter Kjaer
    Commented Aug 1, 2016 at 11:37
  • Actually UI is having restricted access but from the website where we are calling service for creating contacts is indirectly through the service is in touch with the broker database that contains all the PII data of the users registering on the site. So there is always a possibility of getting this info hacked. That was the concern.
    – TheBest_Happy
    Commented Aug 2, 2016 at 9:58
  • The AM service used on your website must also be locked down (i.e. using OAuth and restricting access by IP). Otherwise people "in the know" could indeed talk directly to it and gain access to any Contact's data. But that wasn't actually my question. I'm asking how you see it working, in a future where all of the data is encrypted: would you want it to still be displayed (unencrypted) in the CME? I assume so, but maybe you don't even want your own employees to have access to the data either.
    – Peter Kjaer
    Commented Aug 2, 2016 at 10:16
  • Yes Peter we have to show the emails to the cms users in encrypted form,, actually we have given access of the CMS to only some high level managers. and they are already having access to all these details by other means.
    – TheBest_Happy
    Commented Aug 3, 2016 at 11:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.