I have a number of clients which are CJIS (Criminal Justice Information Service) compliant and practice encryption in place. You can do this commonly without impact to Docuware as the encryption normally does not effect performance or connectivity. The userse see everything in place as if it were just common storage. The idea is if someone attacked from outside the system or gained access to the actual hardware the physical data on the drives would be encrypted and unusable. If someone stole the hard drive the data would be worthless.
Also you have to worry about the data in SQl....you do not want to enrcypt SQL storage directly but you need proection. You do not want someone copying the entire database mdb files and be able to read them....Microsoft has an encryption in place tool for SQL. We have a number of users taking this approach and I have not seem any impact with MS SQL's implementation. Long sotry short is test it test it test it. I would guess that it will work but....some methods expecially those that rely on the clound may have serious vulnerablilties.....what if the cloud is not available etc...
Encryption in place is a good pracice for Goverment, Healthcare and personel.
A good practice for everyone to understand better because there is a day when a client will ask for it.
Craig
