Encrypted messages in Adalo database

Get Help
1

Hello everyone,

Quick question - is there a way to encrypt messages in Adalo database?

Currently I can see messages that users are sending, and I need to make them encrypted so that they don’t get stored in the database as full messages.

Please let me know if you know how to do it.

Many thanks,

Anna

2

Hey Anna @AnnaMedic,

Short answer: no, it’s not possible with Adalo built-in features.

Longer answer: encrypting the messages is only one part of the equation; you need also to be able to decrypt them. There are various algorithms for that, but all of them require that some user key is private and not exposed to anyone. Consequently, you can’t store this key in the database: if you, as an admin, get an access to this user’s key - you get the access to user’s messages. So you need to store this key inside the app itself.
In order to generate keys, exchange them and store them in the app you will need something written in full code (maybe Adalo component can do it, but I’m not sure).

Best,
Victor.

3

Thanks for clarifying this for me, Victor.

I just want to make sure I protect user data and store it properly. I have built a social app/prototype and it involves users sending each other messages on the app that are being stored in Adalo database. Any tips or suggestions on how to make the app more secure?

Thanks,

Anna

4

My long term plan is to raise enough funding to code it from scratch but I am using Adalo now as a prototype as proof of concept.

5

Hi @AnnaMedic

IMHO you’d be hard pushed to get any Adalo app approved for medical information as it all needs to be assessed by the NHS (I seem to remember you were in the UK) to allow you to store PMI and there is zero chance Adalo meets the requirements as they are questionably even GDPR compliant. e.g. No list of downstream processors. Who’s their DPO? etc The chances of you even getting the information you need to satisfy compliance to the NHS assessors is pretty low, especially as they will be probably even politically against “upstarts”.

Proof of concept maybe- but you can’t put real data in there.

6

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.