Military-grade protection for all your data at rest and in transit.
AES-256-GCM encryption is the foundation of Hextal security. Every document, message, file and metadata is encrypted using the AES algorithm in GCM (Galois/Counter Mode), the most robust standard recognised by ANSSI and NIST. This mode provides both confidentiality and integrity: any data tampering is immediately detected.
Unlike traditional cloud solutions where the provider holds the keys, Hextal gives you exclusive control of your encryption keys. Data is encrypted before being written to disk (at rest) and remains encrypted during transfer (in transit) via TLS 1.3. Even in the event of unauthorised access to the underlying infrastructure, your documents remain completely unreadable.
Key rotation is automated and transparent. You can generate new keys at any time, revoke old ones, or apply differentiated encryption policies by workspace, team or document type. No technical intervention is required: everything is natively integrated into the platform.
AES-256-GCM is the standard used by governments and financial institutions to protect classified data. Your documents benefit from the same level of protection.
You are the sole holder of the encryption keys. Hextal never has access to them, guaranteeing total sovereignty over your data.
Encryption is automatic and invisible to users. No manual action is required: any document uploaded to Hextal is instantly protected.
AES-256 encryption satisfies the requirements of the RGPD, the NIS 2 directive and the most stringent European security frameworks.