---
schema_version: "1"
id: 03387200b2394446abbe4cd257a90d6f4036543bbcd2abbabbc083b033e495f9
title: Data Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/ind/264-0-0/comms_t_data_security_240867.md
canonical_url: https://help.salesforce.com/s/articleView?id=ind.comms_t_data_security_240867.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: d5f439032a869bccabb119d8dbdf1199cfcc01222464942c9943e4512304059a
description: "Industries Order Management Plus approaches security from two perspectives: data at rest and data in motion."
products:
  - Industry Solutions
  - Cross Cloud
release: "264"
---
# Data Security

Industries Order Management Plus approaches security from two perspectives: data at rest and data in motion.

## Data at Rest

Data at rest refers to inactive data physically stored on a device or network, such as a database.

- Order Management Plus stores data in a database that has encryption enabled by default. The data is stored in regions that ensure that all country-specific data laws can be adhered to. This is particularly important for EU GDPR, which has strict rules about privacy and the physical location of data.
- Customers can use the **Field Encryption** feature to encrypt specific fields that they deem sensitive. This adds another layer of encryption to further secure sensitive data.

## Data in Motion

Data in motion can occur over the public internet or private networks. In either case, Vlocity Order Management Plus outbound communication uses secure HTTPS/TLS 1.2.

- Salesforce to OM Plus and OM Plus to Salesforce Communication:
    
    - Data communications between Salesforce and AWS uses Secure Sockets Layer (SSL) certificates to encrypt data between platforms. Servers on both sides confirm their identity through signed certificate authority (CA) certificates.
    - Salesforce to AWS RESTful API communications require Single Sign On (SSO).
    - AWS to Salesforce RESTful API communications treat AWS as a Salesforce client. Salesforce client requests use an OAUTH2.0 bearer token, the industry standard protocol for authorization.
- Downstream System Communication: Once a commercial order is decomposed into technical products, Order Management fulfills the order by communicating with several downstream systems over a secure encrypted channel.