A feature introduced in NTFS file systems that allows for individual encryption of files and folders. Fulfills data isolation requirement. Not to be confused with Windows BitLocker which does full-disk encryption.