How to protect sensitive data in a Temporal Application
Oct 9, 2025

Summary
This post details how to protect sensitive data in Temporal applications by explaining the data flow between requesters, the Temporal Service, and Workers. It covers protecting data in transit using TLS and data at rest using application-level encryption via Payload Codecs. The post elaborates on the roles of Data Converters, Payload Converters, Failure Converters, and Payload Codecs in serializing, deserializing, and transforming data, with a focus on using Payload Codecs for encryption to ensure the Temporal Service only sees encrypted data and that keys are managed externally.