>I've not used encryption products, but if the CDX contains keys built on sensitive fields it should probably be encrypted because a CDX could be read via an external program and the key values reconstructed.

In my case, the key is only a unique id which does not represent anything.

>Most definately the .FPT should if the memo fields contain sensitive data, an FPT just stores the data in there and while there are no backlinks to the record the memo pertains to it would be easy to grab data out of there from any program. Go to a DOS window and issue TYPE SomeTable.FPT and you'll see all there is to see about the memo contents.

Thanks.