Skip to main content

Zuora Protect Overview

Zuora

Zuora Protect Overview

Introduces Zuora Protect and explains how it works.

Zuora Protect is a comprehensive suite of security features designed to enhance data protection, privacy, and compliance capabilities within Zuora. It provides your organization with advanced tools to safeguard sensitive information, prevent unauthorized access, and maintain the integrity of your data. 

With features such as Zuora Platform Encryption and Enhanced Audit Trail, Zuora Protect empowers your business to accomplish the following goals:

  • Add additional security to sensitive data by encrypting sensitive data at rest and manage keys with the Zuora Platform Encryption.
  • Meet compliance and industry regulations by monitoring your audit data that dates back a decade with Enhanced Audit Trail.
  • Meet regulatory requirements, mitigate risks, and build trust with your customers by ensuring a secure and compliant environment for your Zuora applications and data.

How Zuora Protect enhances your security posture

Zuora Protect enhances your security posture by providing additional layers of protection:

 

Zuora Protect Architecture

  • Secure from Identity-related risks with a unified SSO for all Zuora applications.
  • Manage all your users and their access from OneID.
  • Create, rotate and manage your encryption keys from the Zuora UI.
     
  • Zuora platform encryption uses multiple layers of encryption keys to encrypt data, providing balance for security and performance.
  • With Bring Your Own Keys (BYOK), generate and manage your encryption keys outside of Zuora, on your own AWS infrastructure and use the keys to import into Zuora for encrypting and decrypting data.
  • Data is stored as an encrypted text in the MySQL database.
     
  • Elastic Block Store (EBS) encryption is enabled, and data at rest on the EBS volumes is encrypted, providing an additional layer of protection against unauthorized access.