# In TiDB Cloud, All Data is Encrypted "Over the Wire"
![`smart`](TiDBCloudProviderRegionDataEncryption04_en_003_20230925.png)
------------------------------------------------------------------------------
In TiDB Cloud, all data is encrypted.

There are no missing pieces when it comes to encryption, even for communication between the TiDB server and TiKV server components, as it is already secured by encryption during transit by default.

The TiDB cluster is deployed across three availability zones (AZs), and the data on TiKV is replicated using the Raft consensus algorithm across these AZs, making it capable of disaster recovery. Additionally, ensuring availability is important for maintaining overall security.

The TiProxy component is optional; customers can request to have it enabled or disabled by submitting a support ticket. It is marked by a dotted box.