Encryption at rest
Encryption at rest means the data a service has stored is unreadable without a key, so a copy of the storage on its own gives up nothing.
It matters most for the logins that connect your channels, because those are what an attacker would actually want. The stronger arrangement keeps the key somewhere separate from the data and ties each stored login to the one workspace it belongs to, so a copy lifted out of that workspace cannot be opened. Ask whether channel logins get their own encryption or only inherit the storage layer's.
More in Data and security
Worth knowing alongside it.
- Workspace isolation
- Workspace isolation means one business using a shared product cannot see another business's messages, contacts, or files.
- Audit log
- An audit log is a durable record of every consequential action in a system, including who did it, when, and what exactly was affected.