With field-level protection, companies can secure sensitive data from creation to production to meet global compliance standards without significant cost or complexity

Baffle, Inc. unveiled its updated Data Protection for Databases solution, which includes no-code implementation with column- and field-level encryption. This enables organizations migrating applications to the cloud, as well as those with applications already in the cloud, to comply with global security regulations to protect sensitive data without the cost, complexity, and ongoing maintenance of implementing encryption in the application.

Enterprises are increasingly subject to privacy regulations worldwide that require them to protect Personal Identifiable Information (PII) data, which is, along with other sensitive data, being moved to the public cloud, dramatically increasing liability. As applications move to the cloud, the increase in attack vectors and the shared responsibility model of cloud service providers require companies to implement stronger data protection measures. Securing “data at rest” is not enough, and although application-level encryption is an alternative, it is difficult and time-consuming to implement.

With an easy-to-implement no-code deployment, Baffle Data Protection for Databases enables application development and database managers to quickly and easily protect columns containing PII in their cloud databases from creation to production. Baffle’s data security platform enables organizations to protect production PII data in databases at the field level, ensuring that data can’t be read by anyone that doesn’t have authorization — even cloud infrastructure and database administrators.

Marketing Technology News: Palo Alto Networks Named a Leader in the Gartner Magic Quadrant for SSE

“When developing applications in the cloud, companies must take responsibility for the safety of their data. Policy-based access control leaves critical data unprotected when it counts, and application-level encryption can cripple performance,” said Ameesh Divatia, CEO of Baffle. “Baffle allows organizations to move swiftly to the cloud, protecting their data in real time from creation to production without dedicating developer cycles to implement encryption into their existing architecture.”

Data Protection That is Superior to Application-Level Encryption

Baffle Data Protection for Databases marries no-code implementation with high-performance architecture to provide cryptographically enforced protection without lengthy implementation time or perceived impact to user experience. The solution “fails safe” so, in the event of a breach, attackers are unable to extract usable data. Not only are an organization’s customers protected, but the organization is as well. There is no requirement for notification in the event that protected data is accessed by a threat actor.

Baffle’s solution offers more control and less risk with comprehensive key management that eliminates any application development burden when incorporating encryption into existing data flows. This includes the ability to allow for key rotation to meet compliance requirements without the need to re-encrypt the data.

Marketing Technology News: MarTech Interview with Shafqat Islam, CMO at Optimizely