Configuring Service Interfaces for Encryption 
To activate message encryption at the database level for specific messages, you need to indicate the corresponding service interfaces in the ES Repository.
More information on the ES Repository: Managing Services in the Enterprise Services Repository
Log on to the ES Repository and open the service interface for which you want to activate message encryption.
More information on service interfaces: Creating a Service Interface
On the Definition tab, select Sensitive Data.
Save and activate the service interface.
We recommend that you specify sender and receiver interfaces as sensitive to ensure end-to-end encryption of a complete scenario.
Example
If you configure message staging in such a way that a message version is stored after the mapping step, the receiver interface is also relevant for this message version.
To ensure that the message version after the mapping step is encrypted, you also need to specify the receiver interface as sensitive.
More information on staging:
Caution
Activating encryption for a specific service interface might impair performance for those scenarios that involve processing of the corresponding message.