# Transparent Encryption

Using transparent encryption you can define a single encryption key that will be used for both encryption and decryption for any data that has been [classified](https://docs.ngsurvey.com/data-encryption/data-classification) as [internal](https://docs.ngsurvey.com/data-encryption/data-classification/internal) or [sensitive](https://docs.ngsurvey.com/data-encryption/data-classification/sensitive).

{% hint style="info" %}
While data is encrypted at the database level note that all that data is accessible in clear through the ngSurvey administration section.
{% endhint %}

To setup global encryption on your server you may set your own private encryption key in an environment variables named **NGSurvey:EncryptionKey** with the value of your encryption key**.**

* [Azure setup](https://docs.ngsurvey.com/data-encryption/encryption-setup/transparent-encryption/azure-encryption-setup)
* [IIS encryption setup](https://docs.ngsurvey.com/data-encryption/encryption-setup/transparent-encryption/iis-encryption-setup)

{% hint style="warning" %}
Make sure to create a key that is alpha numeric based and which is at least 50 characters long.
{% endhint %}