I was thinking to include in my highest plan to encrypt all customers data at rest.
A solution could be to have 2 DBs:
- a DB for the lowest plan without encrypted data (MySQL)
- a DB for the highest plan with encrypted data (MariaDB?)
Do you think it's a stupid idea? If no, do you have a better solution to achieve it?
Do you have any background task (not initiated by a browser session) that you need to execute for your SaaS to work?
Will this encryption deny you critical data required in your background task (think cron/ mailing/ etc..) ?
What happens when the customer forgets their password, and need to reset it? Do they lose all their data in your DB?
Just some questions to think about
You have minimal benefit for not encrypting all data anyway (more technical complexity and liability). Plus, there isn't a court anywhere that will get upset at you for selling a tier that's better / more featured than advertised.
If the only benefit of the higher-cost tier is that it's encrypted, it's likely that a court would be upset upon finding that out. Charging people extra money without any benefit is an easy way to lose a lawsuit.
Other than that, I think it's not very client-friendly to charge for encryption. If you can encrypt any of the data, it would be good to encrypt all of it.