Does Sitecore encrypt the information it captures from forms in the new Sitecore Forms?

Question

Out-of-the-box, Sitecore does not encrypt the information it captures from forms in the Web Forms for Marketers database. It was a known issue and you could find nice blog posts on how to implement encryption in the Web Forms for Marketers information such as http://josedbaez.com/2016/09/wffm-encryption/ and https://sitecorejunkie.com/2013/06/21/encrypt-web-forms-for-marketers-fields-in-sitecore.

Was that solved in the new Sitecore Forms? I couldn't find any information in the Sitecore documentation mentioning that.

Update

To whom it may concern. I've managed to encrypt the data and enable the encryption at rest which I share here https://restlesscode.wordpress.com/2018/01/21/make-sitecore-forms-more-secure/.

LonghornTaco · Accepted Answer · 2017-11-21 22:02:10Z

8

By default, no it does not. I created a simple form, added the Save Data save action and checked the database. It was not encrypted.

I'm off to dig a little deeper to find if this is a setting you can configure!

answered Nov 21, 2017 at 22:02

LonghornTaco

2,53619 silver badges37 bronze badges

It would be nice if you could set this up without needing to add custom code, but I am afraid, in this first release it is not available.
– João Neto
Commented Nov 21, 2017 at 22:29
It looks that way. Just decompiled the save action and looked at the Sql DataProvider - no encryption being done in code. And no settings in the Sitecore.Experience.Forms*.config files.
– LonghornTaco
Commented Nov 21, 2017 at 22:32
1

@JoãoNeto, you should use UserVoice and request that as a future feature.
– Dylan Young
Commented Nov 21, 2017 at 23:45
2

@DylanYoung I already submitted it as a user voice request. :)
– LonghornTaco
Commented Nov 22, 2017 at 0:49
I thought encryption was part of GDPR requirements (or not?) and sitecore 9 is advertised as compliant. What am I missing here
– josedbaez
Commented Dec 1, 2017 at 9:38

| Show 2 more comments