The Need:
BioSecure Resources (BSR) is a specialized firm that handles sensitive data across compliance-heavy environments, including government and healthcare projects. Their website was running on ExpressionEngine, but the platform lacked a built-in mechanism for encrypting custom data fields—particularly those related to confidential user-submitted information.
Off-the-shelf security tools didn’t offer the flexibility or depth BSR required. They needed a tailored solution that allowed specific fields to be encrypted at rest within the CMS, without disrupting existing workflows or sacrificing performance.
The Solution:
MMG engineered a custom encryption module purpose-built for ExpressionEngine. The module allows administrators to assign AES-256 encryption to specific channel fields, with support for both automatic and manual encryption/decryption within the CMS control panel.
We designed the module to work seamlessly with ExpressionEngine’s core field types—text, textarea, email, and more—while preserving compatibility with EE’s templating and publishing workflows. Encryption keys are managed securely, and all sensitive field data is stored in an encrypted state at the database level.
For admin-level users, the decryption happens automatically when authorized staff access entry content. We also built a logging system to monitor access events and changes for auditing purposes.
The module was delivered with full documentation and integrated into BSR’s existing workflow without requiring a CMS migration or compromise in user experience.
The Result:
BSR now has a hardened data layer directly inside their CMS, allowing them to store and manage sensitive records without relying on third-party tools or external databases. The encryption module has made it possible for their team to meet compliance requirements without reengineering their entire content structure.
The system is lightweight, secure, and scalable—giving BSR the ability to confidently expand data collection features while preserving privacy and security standards expected by their clients.
