Baffle provides a comprehensive Cloud Data Protection Platform (CDPP) to help protect your data in the cloud. Within the context of the Shared Responsibility Model, the cloud provider is responsible for protecting the infrastructure that runs all of the services offered by the provider. The customer is responsible for protecting the data that they put in the cloud provider’s environment.
Baffle’s solution integrates seamlessly with cloud native infrastructure services and vastly simplifies encryption to enable a data-centric security model. CDPP builds upon the foundation of encrypting data at-rest, which most security practitioners mistakenly believe is adequate to protect their data. Read more here on at-rest encryption and TDE do absolutely nothing to protect your data against a modern day hack.
The data-centric approach combines access monitoring and field-level encryption with data exfiltration control to provide you with an end-to-end security channel to protect against large-scale data breaches.
Baffle’s unique Record Level Encryption (RLE) protects data in multi-tenant SaaS environments and provides granular entitlements to data in co-mingled data stores.
How Does Baffle Help
Baffle vastly simplifies data-centric encryption to protect data in the cloud. Baffle's technology requires no code changes, deploys with a highly flexible architecture, and supports a range of cloud native services including:
Seamless support for cloud services
- Single-click Secure Cloud Migrations
- Field Level Encryption
- Record Level Encryption (RLE)
- Data Shredding
- Data Exfiltration Control (DEC)
- Single-click Deployment in Minutes via Cloud Templates
- Support for DB PaaS
- Support for Serverless and Microservices
- Support for Cloud Key Management Solutions
Ensures compliance with privacy regulations
Baffle supports data masking and data shredding in addition to its Record Level Encryption capabilities. This enables enterprises and SaaS providers to encrypt their data in the cloud without any application code changes to easily drive compliance. Data shredding supports the “right to be forgotten” for GDPR compliance and data masking keeps data hidden from unauthorized parties.
Protect data from insider threat
Baffle’s Advanced Data Protection turns the database tier into an AES encrypted brick with no key present. This prevents privileged users from accessing sensitive data records while still allowing them to perform operational tasks.
See How Baffle Can Protect Your Data
View a recorded demo or schedule a live demo with one of our solutions experts to get answers to your questions
TiEcon Winner 2017
2017 Emerging Vendors
2017 Security 100
RSAC 2017 Finalist
Related Posts
2019 Data Privacy Wish List: Moving From Compliance To Concern
January 15, 2018 [EXCERPT] For virtually every business, the last and first (calendar) quarters are filled with reflection and planning — for revenue, services, operations, budgeting and, of course, privacy and security. Throughout the year, I’ve spent a lot of time in my column examining…
Baffle – Protecting Your Databases From Breaches
As Ameesh Divatia, the co-Founder and CEO of Baffle, likes to say, we need to accept that data breaches are a fact of computing life today. However, his company’s goal is to make these breaches irrelevant by efficiently encrypting data wherever it may be, so…
Baffle releases a data protection solution for serverless cloud workloads
February 20, 2019 Baffle, an advanced data protection company, announced it has released the first-to-market solution for data-centric protection of Amazon’s AWS Lambda, a pioneering serverless compute service. On the heels of its breakthrough for data-centric encryption, Baffle Advanced Data Protection Service gives enterprises the…