datalevin

Karol Wójcik 2026-01-24T23:48:40.577309Z

How to encrypt the data at rest with datalevin. Is it supported?

Karol Wójcik 2026-01-25T11:18:03.531679Z

Would it be possible to implement encryption on the client side? Could you point me in the right direction, or does encryption need to be implemented inside the database?

Huahai 2026-01-25T19:39:45.076449Z

Of course, encryption at rest can be achieved at multiple layers. From bottom to top: hardware, e.g HSM, -> Disk, e.g LUKS, FileVault, EBS encryption -> Filesystem, e.g fscrypt -> Database, what I assume you are asking, Datalevin doesn't support it now -> Application, many libraries can do that.

Huahai 2026-01-25T19:42:13.704159Z

Many SaaS use envelop encryption provided by cloud platform, e.g. AWS KMS, GCP KMS, Azure Key Value, etc. for mult-tenant, i.e. per tenant key management.

Huahai 2026-01-25T19:46:26.097989Z

If you use a cloud provider, start with cloud disk encryption, add envelop encryption when you have customers, then add application level encryption for sensitive fields. That's it. You normally don't need DB level encryption unless you host your own.

Huahai 2026-01-25T19:48:08.995119Z

In any case, adding encryption in Datalevin is not a high priority, because there are too many other options.

Huahai 2026-01-24T23:50:34.005349Z

It's not supported at the moment. Maybe in the future.