Sophos

Quick product finder

Protect your sector

Education

Education
Protecting schools
and universities

Government

Government
Defending offices
across the globe

Service providers

Service providers
Keeping their
customers safe

Free tools

Alert services

Endpoint Security and Data Protection

Disk Encryption

Key features

Sophos SafeGuard Disk Encryption – part of Sophos Endpoint Security and Data Protection – delivers full disk encryption and SafeGuard PrivateCrypto allows information encryption on removable storage devices as well as secure data exchange with third parties – all within your endpoint budget. Designed to fit within existing IT management processes, it's an easy to implement solution that helps you quickly meet compliance needs.

Proven, certified encryption

  • Protect your company data with proven SafeGuard Full Disk Encryption (FDE). It is based on industry-certified (Common Criteria CC EAL 3, FIPS 140-2) technology already protecting millions of users
  • Trust SafeGuard's sophisticated and reliable encryption solution to protect the entire hard disk including the operating system files, hibernation and temp files
  • Eliminate the risk of storing enciphering keys on disk with the SafeGuard approach of dynamically generating keys from the password
  • Check compliance by using Sophos NAC Advanced to monitor the encryption state

Easy to deploy

  • Quickly and easily implement your data security policy with the simple-to-use configuration wizard
  • Install transparently to end users, either directly to standalone machines or unattended across network
  • Easily recover forgotten passwords using the built-in secure challenge response process
  • Recover data fast with a full set of recovery and repair tools

Easy for end users

  • Allow users to continue working as they always have with a single sign-on after entering their password at Pre-Boot Authentication (PBA), a secure login outside of the operating system
  • SafeGuard PrivateCrypto enables secure data exchange with third parties integrated into Windows Explorer and encryption of email attachments. Recipients simply decrypt with nothing other than the password