NC Encrypt is an add-on module for NC Protect that provides dynamic encryption and encryption key management for Microsoft 365, SharePoint (Online and On-Premises), and File Shares. The module supports two key management models: - Hold Your Own Key (HYOK): Uses dynamically created keys managed by the customer, keeping keys separated from the cloud environment. - Bring Your Own Key (BYOK): Allows integration with third-party key management platforms via Thales CipherTrust Manager, which provides connectivity to Virtual Security Modules (VSMs) and Hardware Security Modules (HSMs). Encryption is applied dynamically based on policies defined in NC Protect's central policy manager, using AES-256 bit encryption that is FIPS 140-2 compatible. Policies can be driven by user attributes, context, and file sensitivity, and apply to both data at rest and data in motion. NC Encrypt can also encrypt SharePoint list column values to restrict visibility. The solution is agentless, requiring no software installation on endpoints, no shared encryption keys or passwords with end users, and no endpoint policy updates. Key management capabilities include remote key management, geographical key storage for data sovereignty, and centralized policy management across the Microsoft suite. The product supports compliance with regulations such as GDPR and HIPAA. Real-time activity logging and reporting tracks permitted and denied access requests, as well as actions taken on accessed files, supporting security breach investigations. NC Encrypt is available for Microsoft 365, SharePoint Server, Office, and File Shares.