# Manage Field Encryption

Vault encrypts Personally Identifiable Information (PII) and Protected Health Information (PHI) at the field level.

## About Field Encryption

All Vault data is stored on encrypted disks. For sensitive information, there is a second level of encryption for field values. Vault encrypts standard PII and PHI fields captured in Individual Case Safety Reports (ICSRs). You can also configure custom encryption on additional _Case_ object fields. Only authorized users within Vault can access the encrypted information.

<div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: Unless an authorized user grants delegate access to Veeva Support, they cannot access data contained in encrypted fields.</p>
    </div>
  </div>
</div>



## <a id="phi-and-pii-field-encryption"></a>PII and PHI Field Encryption

Vault encrypts fields that store PII and PHI on _Inbox Items_, _Cases_, and _Case_-descendant objects, based on the field information, ICH E2B specifications, and EU GDPR compliance. For the list of fields that Vault can mask for masked distributions, see <a href="/en/lr/01225/#patient-content-protection">Generate Masked Safety Reports</a>. For more information on PII and PHI protection, see <a href="/en/lr/15057/#protected-info">Configuring Vault Objects</a>.

<div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: Due to a Vault limitation, the <em>Sex</em> and <em>Country</em> fields cannot be encrypted.</p>
    </div>
  </div>
</div>



### Encrypted Case Fields

The following table lists the _Case_ and _Case_-descendant object fields that Vault encrypts for PII and PHI. Vault also encrypts the MedDRA license key and credentials. For each of these fields, you can [determine whether masking is enabled][1].

<table>
    <thead>
        <tr>
        <th>Object</th>
        <th>Field</th>
        </tr>
    </thead>
    <tbody>
        <tr>
            <td rowspan="20">Case (<code>case_version__v</code>)</td>
            <td>Patient Initials (<code>patient_id_value__v</code>)</td>
        </tr>
        <tr>
            <td>Date of Birth (<code>dob_idate__v</code>) (<code>dob_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Date of Death (<code>dod_idate__v</code>) (<code>dod_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Last Menstrual Period (<code>last_menstrual_idate__v</code>) (<code>last_menstrual_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Specialist MRN (<code>mrn_specialist_value__v</code>)</td>
        </tr>
        <tr>
            <td>Investigation MRN (<code>mrn_investigation_value__v</code>)</td>
        </tr>
        <tr>
            <td>Hospital MRN (<code>mrn_hospital_value__v</code>)</td>
        </tr>
        <tr>
            <td>GP MRN (<code>mrn_gp_value__v</code>)</td>
        </tr>
        <tr>
            <td>Pregnancy Conception Date (<code>pregnancy_conception_date__v</code>)</td>
        </tr>
        <tr>
            <td>Pregnancy Due Date (<code>pregnancy_due_date__v</code>)</td>
        </tr>
        <tr>
            <td>Date of Pregnancy Outcome (<code>date_of_pregnancy_outcome__v</code>)</td>
        </tr>
        <tr>
            <td>Number of Fetuses (<code>number_of_fetuses__v</code>)</td>
        </tr>
        <tr>
            <td>Para/Parity (<code>para_parity__v</code>)</td>
        </tr>
        <tr>
            <td>Gravida/Gravidity (<code>gravida_gravidity__v</code>)</td>
        </tr>
        <tr>
            <td>Event Onset (<code>event_onset_idate__v</code>) (<code>event_onset_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Reporter First Name (<code>reporter_first_name__v</code>)</td>
        </tr>
        <tr>
            <td>Reporter Last Name (<code>reporter_last_name__v</code>)</td>
        </tr>
        <tr>
            <td>Medical History Text (<code>medical_history_text__v</code>)</td>
        </tr>
        <tr>
            <td>Pregnant at Exposure (<code>pregnant_at_vaccination__v</code>)</td>
        </tr>
        <tr>
            <td>Matching Contents (<code>matching_contents__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="2">Case Product Dosage (<code>case_product_dosage__v</code>)</td>
            <td>First Administration (<code>firstadmin_idate__v</code>) (<code>firstadmin_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Last Administration (<code>lastadmin_idate__v</code>) (<code>lastadmin_normalized__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="4">Case Adverse Event (<code>case_adverse_event__v</code>)</td>
            <td>Onset (<code>onset_idate__v</code>) (<code>onset_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Cessation (<code>resolved_idate__v</code>) (<code>resolved_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Hospital Admission Date (<code>hospital_admission_date__v</code>)</td>
        </tr>
        <tr>
            <td>Hospital Discharge Date (<code>hospital_discharge_date__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="3">Case Medical History (<code>case_medical_history__v</code>)</td>
            <td>Start Date (<code>startdate_idate__v</code>) (<code>startdate_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Continuing (<code>continuing_value__v</code>)</td>
        </tr>
        <tr>
            <td>End Date (<code>enddate_idate__v</code>) (<code>end_date_normalized__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="2">Case Drug History (<code>case_drug_history__v</code>)</td>
            <td>Start Date (<code>startdate_idate__v</code>) (<code>startdate_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>End Date (<code>enddate_idate__v</code>) (<code>end_date_normalized__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="16">Case Contact (<code>case_contact__v</code>)</td>
            <td>Title (<code>title_value__v</code>)</td>
        </tr>
        <tr>
            <td>First Name (<code>firstname_value__v</code>)</td>
        </tr>
        <tr>
            <td>Middle Name (<code>middlename_value__v</code>)</td>
        </tr>
        <tr>
            <td>Last Name (<code>lastname_value__v</code>)</td>
        </tr>
        <tr>
            <td>Street (<code>street_value__v</code>)</td>
        </tr>
        <tr>
            <td>Street Line 2 (<code>street_line_2_value__v</code>)</td>
        </tr>
        <tr>
            <td>City (<code>city_value__v</code>)</td>
        </tr>
        <tr>
            <td>Organization (<code>organization_value__v</code>)</td>
        </tr>
        <tr>
            <td>Department (<code>department_value__v</code>)</td>
        </tr>
        <tr>
            <td>City (<code>city_value__v</code>)</td>
        </tr>
        <tr>
            <td>County (<code>county__v</code>)</td>
        </tr>
        <tr>
            <td>State/Province (<code>state_province_value__v</code>)<p><div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: State/Province values are encrypted only when a text value is entered. The <em>State/Province</em> object reference field cannot be encrypted due to a Vault limitation.</p>
    </div>
  </div>
</div>

</p></td>
        </tr>
        <tr>
            <td>Postal/Zip (<code>postalcode_value__v</code>)</td>
        </tr>
        <tr>
            <td>Email (<code>email_address__v</code>)</td>
        </tr>
        <tr>
            <td>Fax (<code>fax__v</code>)</td>
        </tr>
        <tr>
            <td>Telephone (<code>telephone_value__v</code>)</td>
        </tr>
    </tbody>
</table>

### Encrypted Inbox Item Fields

The following table lists the _Inbox Item_ fields that Vault encrypts for PII and PHI. Unlike _Case_ fields, you cannot configure which _Inbox Item_ fields Vault encrypts.

<table>
    <thead>
        <tr>
        <th>Section</th>
        <th>Field</th>
    </tr>
    </thead>
    <tbody>
        <tr>
            <td rowspan="16">Case Contacts</td>
            <td>Title (<code>title_value__v</code>)</td>
        </tr>
        <tr>
            <td>First Name (<code>firstname_value__v</code>)</td>
        </tr>
        <tr>
            <td>Middle Name (<code>middlename_value__v</code>)</td>
        </tr>
        <tr>
            <td>Last Name (<code>lastname_value__v</code>)</td>
        </tr>
        <tr>
            <td>Street (<code>street_value__v</code>)</td>
        </tr>
        <tr>
            <td>Street Line 2 (<code>street_line_2_value__v</code>)</td>
        </tr>
        <tr>
            <td>City (<code>city_value__v</code>)</td>
        </tr>
        <tr>
            <td>Organization (<code>organization_value__v</code>)</td>
        </tr>
        <tr>
            <td>Department (<code>department_value__v</code>)</td>
        </tr>
        <tr>
            <td>County (<code>county__v</code>)</td>
        </tr>
        <tr>
            <td>Country (<code>country_value__v</code>)</td>
        </tr>
        <tr>
            <td>State/Province (<code>state_province_value__v</code>)<p><div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: State/Province values are encrypted only when a text value is entered. The <em>State/Province</em> object reference field cannot be encrypted due to a Vault limitation.</p>
    </div>
  </div>
</div>

</p></td>
        </tr>
        <tr>
            <td>Postal/Zip (<code>postalcode_value__v</code>)</td>
        </tr>
        <tr>
            <td>Email (<code>email_address__v</code>)</td>
        </tr>
        <tr>
            <td>Fax (<code>fax__v</code>)</td>
        </tr>
        <tr>
            <td>Telephone (<code>telephone_value__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="21">Patient</td>
            <td>Patient Initials (<code>patient_id_value__v</code>)</td>
        </tr>
        <tr>
            <td>Date of Birth (<code>dob_idate__v</code>) (<code>dob_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Date of Death (<code>dod_idate__v</code>) (<code>dod_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Last Menstrual Period (<code>last_menstrual_idate__v</code>) (<code>last_menstrual_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Gestation (<code>gestation_value__v</code>) (<code>gestation_unit__v</code>)</td>
        </tr>
        <tr>
            <td>MRN - Specialist (<code>mrn_specialist_value__v</code>)</td>
        </tr>
        <tr>
            <td>MRN - Investigation (<code>mrn_investigation_value__v</code>)</td>
        </tr>
        <tr>
            <td>MRN - Hospital (<code>mrn_hospital_value__v</code>)</td>
        </tr>
        <tr>
            <td>MRN - GRP (<code>mrn_gp_value__v</code>)</td>
        </tr>
        <tr>
            <td>Pregnancy Due Date (<code>pregnancy_due_date__v</code>)</td>
        </tr>
        <tr>
            <td>Date of Pregnancy Outcome (<code>date_of_pregnancy_outcome__v</code>)</td>
        </tr>
        <tr>
            <td>Number of Fetuses (<code>number_of_fetuses__v</code>)</td>
        </tr>
        <tr>
            <td>Pregnant at Exposure (<code>pregnant_at_vaccination__v</code>)</td>
        </tr>
        <tr>
            <td>Para/Parity (<code>para_parity__v</code>)</td>
        </tr>
        <tr>
            <td>Gravida/Gravidity (<code>gravida_gravidity__v</code>)</td>
        </tr>
        <tr>
            <td>Race (<code>race__v</code>)</td>
        </tr>
        <tr>
            <td>Ethnicity (<code>ethnicity__v</code>)</td>
        </tr>
        <tr>
            <td>Matching Contents (<code>matching_contents__v</code>)</td>
        </tr>
        <tr>
            <td>Height (<code>height_value__v</code>) (<code>height_unit__v</code>) (<code>height_normalized_cm__v</code>)</td>
        </tr>
        <tr>
            <td>Age Group (<code>age_group__v</code>)</td>
        </tr>
        <tr>
            <td>Age (<code>age_value__v</code>) (<code>age</code>) (<code>age_normalized_year__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="3">Products > Case Product</td>
            <td>Indication (<code>child_indication_data__v</code>) (<code>name_meddra__v</code>) (<code>name_meddra_coding_method__v</code>) (<code>name_reported__v</code>)</td>
        </tr>
        <tr>
            <td>Start Date (<code>startdate_idate__v</code>) (<code>startdate_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>End Date (<code>enddate_idate__v</code>) (<code>end_date_normalized__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="3">Products > Case Product Dosage</td>
            <td>First Admin Date (<code>firstadmin_idate__v</code>) (<code>firstadmin_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Last Admin Date (<code>lastadmin_idate__v</code>) (<code>lastadmin_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Duration (<code>duration_unit__v</code>) (<code>duration_number__v</code>) (<code>duration_calculation_status__v</code>)</td>
        </tr>
        <tr>
            <td rowspan="7">Events > Medical Event</td>
            <td>Onset (<code>onset_idate__v</code>) (<code>onset_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Cessation (<code>resolved_idate__v</code>) (<code>resolved_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Hospital Admission Date (<code>hospital_admission_date__v</code>)</td>
        </tr>
        <tr>
            <td>Hospital Discharge Date (<code>hospital_discharge_date__v</code>)</td>
        </tr>
        <tr>
            <td>Start Date (<code>startdate_idate__v</code>) (<code>startdate_normalized__v</code>)</td>
        </tr>
        <tr>
            <td>Continuing (<code>continuing_value__v</code>)</td>
        </tr>
        <tr>
            <td>End Date (<code>enddate_idate__v</code>) (<code>end_date_normalized__v</code>)</td>
        </tr>
    </tbody>
</table>

## <a id="configure-custom-encrypt"></a>Configure Custom Field-Level Encryption

<div class="note-border alert-info">
  <div class="alert alert-info" role="alert">
    <div><i class="far fa-info-circle"></i></div>
    <div class="alert-text">
      <p><strong>Note</strong>: Vault cannot add additional encryption on system-managed fields, object keys (<code class="language-plaintext highlighter-rouge">name__v</code>), formula reference fields, document reference fields, or fields that already have values.</p>
    </div>
  </div>
</div>



1. In the **Admin** area, go to **Configuration > Objects**. 
2. Open the object that contains the fields that you want to encrypt. 
4. From the **Fields** tab, open the field that you want to encrypt.
5. Select **Edit**. 
6. Select **Encrypt Field Value**.
7. Select **Save**.

**Result**

Vault will encrypt values entered into fields where you have enabled this option. You can only enable this option for a maximum of ten (10) fields per object. <a href="/en/lr/15057/">Configuring Vault Objects</a> provides more information about configuring Vault objects.

## Field-Level Encryption Limits
Vault enforces certain limits to ensure that you do not experience performance issues:

<table>
    <thead>
        <tr>
        <th>Type</th>
        <th>Limit</th>
    </tr></thead>
    <tbody>
        <tr>
            <td>Custom Objects</td>
            <td>Up to 50 custom objects per Vault</td>
        </tr>
        <tr>
            <td>Custom Fields on Objects</td>
            <td>Up to 300 custom fields assigned to each object</td>
        </tr>
        <tr>
            <td>Object Types</td>
            <td>Up to 10 object types per object</td>
        </tr>
        <tr>
            <td>Object Records</td>
            <td>Up to ten million (10,000,000) records per object</td>
        </tr>
        <tr>
            <td>Custom Relationships</td>
            <td>Up to 20 relationships per object</td>
        </tr>
    </tbody>
</table>

If your organization needs higher limits, contact <a class="external-link " href="https://support.veeva.com/hc/en-us" target="_blank" rel="noopener">Veeva Support<i class="fa fa-external-link" aria-hidden="true"></i></a>.

[1]: #configure-custom-encrypt