Encryption Management

Data security is a priority in Datto Endpoint Backup Version 2.
All data is encrypted both in-flight and at rest.

Default Encryption:

  • Data is automatically encrypted using Datto's secure key management system
  • No additional configuration required
  • Datto can assist with data recovery if needed

Customer-Managed Encryption:

  • You specify your own encryption key during agent deployment.
  • This provides you with complete control over data access.

IMPORTANT  If you lose your encryption key, your data CANNOT be recovered.

  • Datto cannot assist with data recovery without customer-managed encryption keys.
  • Store your encryption key securely. It will be required for all restore operations.
  • Optionally, specify an encryption key at the time of installation for self-managed keys.

NOTE  Once deployed, the data center is locked. To change it, uninstall the agent and redeploy it with a new deployment token configured for the desired data center.