SecureCloud supports full disk encryption, including encryption of the boot volume where the operating system is stored. Pre-boot authentication is used to retrieve the key necessary to decrypt the boot volume.

SecureCloud uses the Advanced Encryption Standard (AES) encryption algorithm and a 256-bit key. AES uses the cipher-block chaining (CBC) mode of operation.

Users who are assigned to the Account Administrator role can export device encryption keys in order to back up the keys, to clone devices, and to restore devices. Keys are encrypted and password-protected, then saved to a ZIP file.