Secure Data-in-Use, in-Transit, and at-Rest in PostgreSQL with NO code changes

Encrypt, tokenize, or mask at field-, row-, and/or column-level

Easier, faster, and better than pgcrypto at protecting data in AWS or Azure

  • Meets compliance requirements for GDPR and PCI, including data sovereignty, data residency, and the right to be forgotten
  • BYOK support for multi-tenancy at logical database and row-level
  • Revoking access to the key makes all copies of the data unreadable

No-Code Implementation

  • Baffle is easily implemented with minimal changes to applications and their underlying databases
  • Quickly protect data with a variety of encryption methods, without lengthy development of application-level encryption
  • SQL statements from application to database are unchanged

High-Performance Architecture

  • Baffle has been designed to encrypt/decrypt data at a high rate, with no impact on user experience
  • Proxy design ensures no impact to application and database performance
  • Modular architecture enables scaling for performance and availability requirements

Cryptographically-enforced Isolation

  • Baffle’s encryption ensures each department or customer’s data is compartmentalized from any other customer’s data
  • Accessing the data without the key leads to encrypted, anonymized text
  • Even data administrators can’t see the data in clear text without proper access
Saxo
Workiva