Questions from security auditors re: UIPath features/capabilities

[cornells]

Didn’t see answers to these specific Qs elsewhere, sorry if these are repeats or too simple for words, but…

• passwords for users are encrypted in UIPath database tables - what encryption scheme is used?
• user logins successful and failed are stored somewhere in the database since the information is reported on the user’s profile page in Orchestrator. Since this information is not included in the downloaded audit log .csv report, where can it be found in the database?

[Srini84 (Srinivas Kadamati)]

@cornells

Welcome to forums

Check below post

How UIPATH is secure

I have a doubt someone help me In which format we store the datas When we save our credentials (password) it store in encrypted or not. if we encrypt, Which encryption techniques we follow We have a some confidential flow chart is this hackable or not. Someone hack our data they can read or not? How UIPATH is secure.

Hope this helps you

Thanks

[Maneesha_de_silva]

Hi @cornells
Welcome to the UiPath community

@cornells

passwords for users are encrypted in UiPath database tables - what encryption scheme is used?

Answer is : UiPath stored password as AES 256 bit encryption

@cornells

user logins successful and failed are stored somewhere in the database since the information is reported on the user’s profile page in Orchestrator. Since this information is not included in the downloaded audit log .csv report, where can it be found in the database?

Answer : your referenced data has been stored in below tables

• dbo.UserLoginAttempts
• dbo.Users

Please Make sure when you access Orchestrator DB , with not doing any changes without having proper information

[cornells]

@Maneesha_de_silva Thank you sir

[Maneesha_de_silva]

@cornells
You are always welcome to the community