# Environments overview

**An environment** is a logical structure that separates data in the CKEditor Cloud Services ecosystem.\
A single product can contain many environments. It allows for creation of independent spaces on the Collaboration Server and other services.

<a id="security">

## Security

Each environment has its own set of `accessKeys` and `apiSecret`. It means that for every environment the token endpoint and the request signature script need to be separate. It reduces the risk of connecting unintentionally to other environments.

Data belonging to the environment is encrypted by using different encryption keys for each environment.

You can learn more about security in [System Security](../../guides/system-security.md) guide.

<a id="cloud-region">

## Cloud region

Each environment has a [cloud region](../../guides/saas-vs-on-premises.md#cloud-region). The region is set per-subscribtion and (unless you have Custom plan with multi-region) cannot be changed for existing environments by the user. This topic is addressed in more detail in the [Environment management](environments-management.md#cloud-region) guide.

<a id="data-migration">

## Data migration

Because environments are fully isolated, data is not shared between them. If you need to move documents and users from one environment to another – for example, between two organizations, between two On-Premises instances, or between the EU and US cloud regions – see the [Data migration](data-migration.md) guide.

<a id="next-steps">

## Next steps

* [Create a new environment](environments-management.md#creating-a-new-environment)
* [Migrate data between environments](data-migration.md)

---

Full index of the Cloud Services documentation: [llms.txt](../../../llms.txt)