> ## Documentation Index
> Fetch the complete documentation index at: https://support.locker.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Organization Data Sharing

> How data is shared between organization members using key exchange.

## Organization Data Sharing

One of the purposes of creating Organizations in Locker is to share data with group members. This feature is especially useful for organizations and groups that need to share passwords and confidential data with each other securely. Locker accomplishes this through widely recognized key exchange models, algorithms, and data encryption algorithms.

In the [Organization Initialization](/en/locker-whitepaper/data-sharing/organization-initialization) section, we learned that data in the organization's Vault is encrypted using the [AES-256-CBC encryption algorithm](/en/locker-whitepaper/security-fundamentals/aes-256-cbc-encryption) with the **Org Symmetric Key**. This key has been encrypted and stored in the Owner's Vault. For another member of the Organization to access and read the encrypted Org Vault Item data, they will need the Org Symmetric Key to decrypt this data. At this point, the data sharing problem essentially becomes a key exchange problem for the Org Symmetric Key between the Owner and the Member. The [RSA encryption algorithm](/en/locker-whitepaper/security-fundamentals/rsa-encryption) helps us solve this problem.

The diagram below describes the process of transferring the **Org Symmetric Key** from the Owner to a Member. Note that the Owner's Org Symmetric Key has been successfully decrypted after being retrieved from the database. Refer to the decryption process in the [Organization Initialization](/en/locker-whitepaper/data-sharing/organization-initialization) section.

<img src="https://mintcdn.com/locker/RN2-OO7uarVxuthM/images/en/locker-whitepaper/data-sharing/key-exchange.png?fit=max&auto=format&n=RN2-OO7uarVxuthM&q=85&s=1be19696354e6d37fdf974b5ee7d3ed7" alt="Org Symmetric Key transfer diagram" width="1074" height="754" data-path="images/en/locker-whitepaper/data-sharing/key-exchange.png" />

After obtaining the **Org Symmetric Key**, the process of encrypting and decrypting data within the Organization is similar to the [process for individual users](/en/locker-whitepaper/encryption-and-decryption/data-encryption).

<div style={{display: "flex", gap: "16px"}}>
  <img src="https://mintcdn.com/locker/RN2-OO7uarVxuthM/images/en/locker-whitepaper/data-sharing/organization-data-sharing-encrypt.png?fit=max&auto=format&n=RN2-OO7uarVxuthM&q=85&s=f571fbbb5589809d747a6d1564438380" alt="Org Vault Item encryption diagram" style={{width: "50%"}} width="559" height="562" data-path="images/en/locker-whitepaper/data-sharing/organization-data-sharing-encrypt.png" />

  <img src="https://mintcdn.com/locker/RN2-OO7uarVxuthM/images/en/locker-whitepaper/data-sharing/organization-data-sharing-decrypt.png?fit=max&auto=format&n=RN2-OO7uarVxuthM&q=85&s=a32158110f16afb88e2a0147d125b16b" alt="Org Vault Item decryption diagram" style={{width: "50%"}} width="559" height="562" data-path="images/en/locker-whitepaper/data-sharing/organization-data-sharing-decrypt.png" />
</div>
