We are currently working on evaluating new helpdesk software to implement into our organization and while Freshdesk seems the most feature complete we are running into issues regarding how the data security is handled.
Mainly that while all data stored in the database is encrypted the attachments to tickets apparently have no encryption in place. So theoretically are accessible to anyone with back-end access to the servers as well as freely accessible if the servers were ever compromised. Obviously this raises a few security concerns for us as anything unencrypted in the cloud does raise a bit question mark regarding the security of that data.
I discussed it with a few of the Freshdesk team and have been told that there are some plans to encrypt everything stored on the servers but was hoping to get some more details regarding this, as well as a date of when this will be implemented.
Also (and arguably more interesting) how other Freshdesk users get around this security concern?
