Add KB article: Does NDC encrypt data at rest and in transit?

[dte-arm]

Summary

Adds a customer-facing KB article for Netwrix Data Classification covering encryption of data at rest and in transit.

Notes

• Customer-facing wording only
• Excludes internal implementation details
• Covers protected stored data, transport security, authentication, and optional extracted text encryption

[hilram7]

Hi! Before this is merged, the article needs a few structural changes to match our KB style guide — kb_style_guide.md is in the root of the docs/ folder for reference.

• Frontmatter — The article is missing its frontmatter block entirely. All KB articles require: title, description, sidebar_label, keywords, products, tags (must include kb), and knowledge_article_id [if originally from SF or ZD]. See the example block in the style guide's Frontmatter section.
• Article structure — The current sections (## Summary, ## Applies To, ## Information, ## Resolution, ## Additional Information) don't match any of the defined article types. Since this answers a yes/no customer question, the closest fit is the How-To Q&A format, which uses ## Question and ## Answer as the main sections.
• Title — Product names belong in the product's frontmatter field, not the title. Remove "Netwrix Data Classification (NDC)" from the title and define the NDC abbreviation on first use in the article body instead.

To help, here's a revised draft you can:

1. Review, and if it looks good to you, then copy/paste into the PR's current file.
2. Click the Files changed section at the top of your PR.
3. Navigate to the top-right corner of the file and click the three dots.
4. Select Edit file to update the draft in a new commit.

  ---                                                                                                                                                    
  title: "Data Encryption at Rest and in Transit"                                                                                                        
  description: >-                                                                                                                                        
    Netwrix Data Classification (NDC) supports encryption for sensitive data                                                                             
    at rest and in transit, including credentials, tokens, and API keys.                                                                                 
    This article describes NDC's encryption methods, authentication support,                                                                             
    and deployment considerations.                                                                                                                       
  sidebar_label: "Data Encryption at Rest and in Transit"                                                                                                
  keywords:                                                                                                                                              
    - encryption                                                                                                                                         
    - data at rest                                                                                                                                       
    - data in transit                                                                                                                                    
    - AES                                                                                                                                                
    - TLS                                                                                                                                            
    - HTTPS
    - credentials
    - Netwrix Data Classification                                                                                                                        
    - NDC                                                                                                                                                
    - security                                                                                                                                           
    - cryptography                                                                                                                                       
    - certificates                                                                                                                                   
  products:
    - data_classification
  tags:
    - kb
  knowledge_article_id: kA0Qk000000XXXXKAA                                                                                                               
  ---                                                                                                                                                    
                                                                                                                                                         
  # Data Encryption at Rest and in Transit                                                                                                               
                                                                                                                                                     
  ## Question

  Does Netwrix Data Classification (NDC) encrypt data at rest and in transit?
                                                                                                                                                         
  ## Answer                                                                                                                                              
                                                                                                                                                         
  Yes. NDC supports encryption for sensitive data both at rest and in transit, depending on deployment configuration.                                    
                                                                                                                                                     
  ### Data at Rest

  NDC encrypts sensitive stored data to protect it from unauthorized access. This includes:

  - System credentials
  - Connector secrets
  - OAuth tokens                                                                                                                                         
  - API keys                                                                                                                                             
  - Client secrets                                                                                                                                       
  - Private keys                                                                                                                                         
  - Passwords                                                                                                                                        
  - Certificate thumbprints

  NDC also supports optional encryption of extracted text data. Organizations can enable this when required by their security policy.

  ### Data in Transit
                                                                                                                                                         
  NDC supports secure communication methods to protect data in transit. This includes:                                                                   
                                                                                                                                                         
  - HTTPS for web application traffic                                                                                                                    
  - HTTPS for API communication                                                                                                                      
  - Encrypted database connections, where configured
  - HTTPS for supported cloud integrations
  - TLS/SSL for outbound SMTP, where configured                                                                                                          
  - Encrypted communication between internal services                                                                                                    
                                                                                                                                                         
  ### Authentication                                                                                                                                     
                                                                                                                                                     
  NDC supports the following authentication methods:

  - Windows Authentication
  - Forms Authentication
  - Azure AD
  - SAML

  Authentication-related data is protected using established platform security controls.
                                                                                                                                                         
  ### Cryptographic Standards                                                                                                                            
                                                                                                                                                         
  NDC includes standard cryptographic capabilities to support secure product operation:                                                                  
                                                                                                                                                     
  - AES encryption for sensitive stored data
  - SHA-256 for hashing operations
  - X.509 certificate support for certificate-based scenarios
  - Secure key exchange for distributed deployment scenarios                                                                                             
                                                                                                                                                         
  ### Deployment Considerations                                                                                                                          
                                                                                                                                                         
  Core encryption for sensitive data handling does not require additional configuration. Customers with specific security or compliance requirements 
  should review their deployment configuration to confirm that optional settings are enabled per organizational policy:

  - HTTPS enforcement
  - Database transport encryption                                                                                                                        
  - SMTP encryption                                                                                                                                      
  - Extracted text encryption                                                                                                                            
                                                                                                                                                         
  > **NOTE:** Actual encryption behavior may vary depending on deployment architecture and configuration. For environment-specific validation, review the
   deployed settings in your environment or contact Netwrix Support.