Is my data encrypted? | WorkAdventure

Q: Is my data encrypted?

In transit, every connection to WorkAdventure is encrypted. Web traffic uses HTTPS with HSTS. Audio and video use WebRTC, which encrypts media with DTLS and SRTP, whether the stream goes peer-to-peer or through our media servers. Chat messages in a private chat room can additionally be end-to-end encrypted, when encryption is turned on for that room. WorkAdventure’s chat is built on the Matrix protocol and supports its end-to-end encryption, so that encrypted messages are readable only on the participants’ devices and by no one else (including WorkAdventure’s administrators). Once turned on, encryption cannot be turned off for that room. See Using the chat. At rest, stored files are encrypted with AES-256 server-side encryption, using keys managed by the hosting provider (OVHcloud or AWS, depending on where the file lives). Database backups are stored in an encrypted bucket at a different hosting provider than the database itself. The full list of measures is in the security section of our privacy policy.

In transit, every connection to WorkAdventure is encrypted. Web traffic uses HTTPS with HSTS. Audio and video use WebRTC, which encrypts media with DTLS and SRTP, whether the stream goes peer-to-peer or through our media servers.

Chat messages in a private chat room can additionally be end-to-end encrypted, when encryption is turned on for that room. WorkAdventure’s chat is built on the Matrix protocol and supports its end-to-end encryption, so that encrypted messages are readable only on the participants’ devices and by no one else (including WorkAdventure’s administrators). Once turned on, encryption cannot be turned off for that room. See Using the chat.

At rest, stored files are encrypted with AES-256 server-side encryption, using keys managed by the hosting provider (OVHcloud or AWS, depending on where the file lives). Database backups are stored in an encrypted bucket at a different hosting provider than the database itself.

The full list of measures is in the security section of our privacy policy.