# Data Encryption in TiDB Cloud
+ TiDB Cloud and the customer are responsible for encryption in transit
  + TLS is required by TiDB clusters managed by TiDB Cloud
+ AWS/GCP is responsible for encryption at rest
  + TiDB clusters data are always encrypted automatically in TiDB Cloud
------------------------------------------------------------------------------
[no notes]