--- title: "Encryption" source: "https://www.tigera.io/features/encryption/" --- # Calico FeaturesEncryption Protect sensitive data and meet compliance requirements with Calico’s high-performance encryption for data in transit [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ![EncryptionShort](https://embed-ssl.wistia.com/deliveries/097973e65e25bcc9f66d187a8b3f0451.jpg?image_crop_resized=960x540)   OverviewBenefitsCapabilitiesHow It WorksResources - [Calico Cloud](https://www.tigera.io/tigera-products/calico-commercial-editions/) - Encryption ## Overview Not all threats originate from outside an organization. According to Gartner, nearly 75% of breaches are the result of insider behavior, people within the organization such as employees, former employees, contractors, or business associates who have inside information concerning the organization’s security practices, data, and computer systems. This level of exposure is unacceptable for organizations that have strict data protection and regulatory compliance requirements. Calico data-in-transit encryption provides category-leading performance and lower CPU utilization than legacy approaches like IPsec and OpenVPN tunneling protocols. No matter where a threat originates, data encrypted by Calico is unreadable to anyone except the legitimate keyholder, thus protecting sensitive data should a perimeter breach occur. ## Benefits ![Two overlapping blue parallelograms](https://www.tigera.io/app/uploads/2021/05/Icon-1.png) ### Enables Compliance Enables compliance with corporate and regulatory data protection requirements that specify the use of encryption, including SOX, HIPAA, GDPR, and PCI. ### Leading Performance Delivers better performance and lower CPU utilization than IPsec and OpenVPN tunneling protocols. Calico with encryption enabled is 6x faster than any other solution on the market. ### Data Protection Provides defense-in-depth when combined with existing Calico security solutions like [workload access controls](https://www.tigera.io/features/access-controls/), [extending firewalls to Kubernetes](https://www.tigera.io/features/access-controls/), and [intrusion detection (IDS)](https://www.tigera.io/features/intrusion-detection-system/). ## Capabilities ![Calico Encryption](https://www.tigera.io/app/uploads/2021/06/calico-encryption.png) - Calico uses WireGuard to implement data-in-transit encryption. WireGuard runs as a module inside the Linux kernel and provides better performance and lower CPU utilization than IPsec and OpenVPN tunneling protocols. - Calico encryption eliminates operational complexity for DevSecOps teams vs. standard approaches. TLS, for example, requires SSL certificates and results in more complexity and operational overhead for IT organizations that are already overburdened. - Calico encryption can be used to address regulatory mandates that specify the use of encryption, including SOX, HIPAA, GDPR, and PCI. ![Encrypted CNI Benchmarks_Aug2020](https://www.tigera.io/app/uploads/2020/10/Encrypted-CNI-Benchmarks_Aug2020-1.png) - Independent benchmark tests of Kubernetes [CNI’s](https://itnext.io/benchmark-results-of-kubernetes-network-plugins-cni-over-10gbit-s-network-updated-august-2020-6e1b757b9e49) show that Calico with encryption enabled is 6x faster than any other solution in the market. ## How It Works   Encryption is a foundational element for environments that must meet regulatory compliance requirements for data privacy and protection. Calico encryption combines superior performance and reduced CPU utilization with operational simplicity. ## Get Started [Start Free](https://www.calicocloud.io/)[Get a Demo](https://www.tigera.io/demo/) ## Resources ![eBook](https://www.tigera.io/app/uploads/2021/06/ebook.svg) ### Free eBook [Learn More](https://www.tigera.io/blog/oreilly-ebook-kubernetes-security-and-observability-early-release/) ![Learning Icon](https://www.tigera.io/app/uploads/2021/06/learning-center.svg) ### Technical Blog [Learn More](https://www.tigera.io/blog/introducing-data-in-transit-encryption-for-calico-enterprise/) ![Documentation Icon](https://www.tigera.io/app/uploads/2021/06/documentation.svg) ### Documentation [Learn More](https://docs.tigera.io/calico-enterprise/latest/about/)