Encryption by Default Data is chunked and Data encryption Encrypted chunks and All connections to each chunk is keys (DEKs) are wrapped encryption keys are Google Cloud encrypted with its own wrapped using a key distributed across Google’s require TLS data encryption key encryption key storage infrastructure. (KEK)