--- title: "Encryption" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/features/encryption/" --- Solution # Encryption Protect sensitive data and meet compliance requirements with Calico’s high-performance encryption for data in transit [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ![EncryptionShort](https://embed-ssl.wistia.com/deliveries/097973e65e25bcc9f66d187a8b3f0451.jpg?image_crop_resized=612x344) ## Benefits ![Two overlapping blue parallelograms](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2021/05/Icon-1.png) ### Enables Compliance Enables compliance with corporate and regulatory data protection requirements that specify the use of encryption, including SOX, HIPAA, GDPR, and PCI. ### Leading Performance Delivers better performance and lower CPU utilization than IPsec and OpenVPN tunneling protocols. Calico with encryption enabled is 6x faster than any other solution on the market. ### Data Protection Provides defense-in-depth when combined with existing Calico security solutions like [workload access controls](https://www.tigera.io/features/access-controls/), [extending firewalls to Kubernetes](https://www.tigera.io/features/access-controls/), and [intrusion detection (IDS)](https://www.tigera.io/features/intrusion-detection-system/). ## Trusted by Customers Worldwide [![Orange logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-Orange.png)](http://www.orange.com/en) [![Siemens Healthineers logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/09/logo-siemens-healthineers.png)](https://www.siemens-healthineers.com/) [![RBC logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-RBC.png)](https://www.rbcroyalbank.com/) [![Marsh McLennan logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-Marsh-and-McLennan.png)](http://www.mmc.com/) [![Nowcom logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-NOWCOM.png)](http://www.nowcom.com/) [![Presidio logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-Presidio.png)](https://www.presidio.com/) [![Box logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-box.png)](http://www.box.com/home) [![Nvidia logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-Nvidia.png)](https://www.nvidia.com/) [![FM Global logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/03/logo-FM-Global.png)](https://www.fmglobal.com/) [![Upwork logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/12/logo-upwork.png)](https://www.upwork.com/) [![Essentra logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/04/logo-Essentra.png)](https://www.essentra.com/en) [![GoDaddy logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/03/logo-GoDaddy.png)](https://www.godaddy.com/) [![Arvato Systems logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/01/logo-Arvato-systems.png)](https://www.arvato-systems.com/) [![Aldagi logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/10/logo-aldagi.png)](https://aldagi.ge/en/) [![NBC Universal logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/09/logo-NBC-Universal.png)](https://www.nbcuniversal.com/) [![Chipotle logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/logo-Chipotle.png)](https://www.chipotle.com/) [![Meridianlink logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-Meridianlink.png)](http://www.meridianlink.com/) [![Mulligan Funding logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-MulliganFunding.png)](https://www.mulliganfunding.com/) [![HanseMerkur logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-HanseMerkur.png)](http://www.hmrv.de/en) [![Fiserv logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/12/logo-fiserv.png)](https://www.fiserv.com/) [![Berenberg logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-BERENBERG.png)](http://www.berenberg.de/en/) [![eHealth logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/10/logo-eHealth.png)](https://wordpress-1075849-4005834.cloudwaysapps.com/ehealth-case-study/) [![Coinmetrics logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2022/03/logo-coinmetrics.png)](http://coinmetrics.io/) ## Capabilities ![Calico Encryption](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2021/06/calico-encryption.png) - Calico uses WireGuard to implement data-in-transit encryption. WireGuard runs as a module inside the Linux kernel and provides better performance and lower CPU utilization than IPsec and OpenVPN tunneling protocols. - Calico encryption eliminates operational complexity for DevSecOps teams vs. standard approaches. TLS, for example, requires SSL certificates and results in more complexity and operational overhead for IT organizations that are already overburdened. - Calico encryption can be used to address regulatory mandates that specify the use of encryption, including SOX, HIPAA, GDPR, and PCI. ![Encrypted CNI Benchmarks_Aug2020](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2020/10/Encrypted-CNI-Benchmarks_Aug2020-1.png) - Independent benchmark tests of Kubernetes [CNI’s](https://itnext.io/benchmark-results-of-kubernetes-network-plugins-cni-over-10gbit-s-network-updated-august-2020-6e1b757b9e49) show that Calico with encryption enabled is 6x faster than any other solution in the market. ## How It Works ![Encryption_long](https://embed-ssl.wistia.com/deliveries/287fe46bbd48934ce9ef4b6c2113da66.jpg?image_crop_resized=612x344) Encryption is a foundational element for environments that must meet regulatory compliance requirements for data privacy and protection. Calico encryption combines superior performance and reduced CPU utilization with operational simplicity. ## Available on Microsoft Azure, AWS, and Google Marketplace Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go. [On Azure](https://azuremarketplace.microsoft.com/en-ca/marketplace/apps/tigerainc1620235671643.calicocloudsaas?tab=overview) [On AWS](https://aws.amazon.com/marketplace/pp/prodview-pq3tgvtlj3wce) [On Google Cloud](https://console.cloud.google.com/marketplace/product/tigera-public/calico-cloud?inv=1&invt=Ab27_g&project=tigera-public) ![Microsoft Azure, AWS, and Google Cloud logos.](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2025/07/Solution-cloud-marketplace-AWS-Azure-03.svg) ## Resources ![O’Reilly eBook: Kubernetes Security and Observability](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2024/05/Featured-resources-OReilley-ebook.png) eBook ### O’Reilly eBook: Kubernetes Security and Observability Learn to secure Kubernetes workloads and monitor network traffic for compliance and security. [Learn More](https://www.tigera.io/blog/oreilly-ebook-kubernetes-security-and-observability-early-release/) ![Introducing Data-in-Transit Encryption for Calico Enterprise](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2020/10/Calico-WireGuard-Encryption.png) Blog ### Introducing Data-in-Transit Encryption for Calico Enterprise Calico Enterprise, the leading solution for Kubernetes networking, security and observability in hybrid and multi-clouds now includes encryption for data-in-transit. [Learn More](https://www.tigera.io/blog/introducing-data-in-transit-encryption-for-calico-enterprise/) ![Introduction to Kubernetes Networking and Security](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2023/05/Calico-Enterprise-Tigera-1200x628-1.png) Documentation ### Introduction to Kubernetes Networking and Security Read our docs and see how you can kickstart your Kubernetes journey with Calico Enterprise. [Read More](https://docs.tigera.io/calico-enterprise/latest/about/) ![Calico Logo](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action [Start Free](https://www.calicocloud.io/) [Get a Demo](https://wordpress-1075849-4005834.cloudwaysapps.com/demo/)