HIPAA, GDPR, CCPA and other emerging data privacy regulations are encouraging customers to review how they handle and protect their customers data. Enterprises are often choosing to mask, remove or encrypt sensitive data in the ETL (Extract, Transform and Load) step to minimize the significant (board level) risk of this sensitive PII & PHI data becoming stored, logged, accessable or worse still, breached in their data lake or data warehouse.
The best solution is to remove, hash, or anonymize sensitive data but that’s not always a suitable business solution. PII and PHI data is needed for business applications but must be strongly protected in transport or in the customer’s application.
Integrate.io is partnering with Amazon's Key Management Service (KMS) to enable customers to encrypt and decrypt fields using their own encryption key. Amazon's KMS enables Integrate.io to give the customer full control of the encryption keys, their rotation and their logging whilst maintaining very high, proven security. Customers can create a new KMS Customer Managed Key, and give Integrate.io secure access to this key’s ARN for all their encryption and decryption on Integrate.io without having to exchange secrets.
Encrypt Function
Inside Integrate.io’s ETL package customers can encrypt data by passing the string to the Encrypt function with their AWS Key ARN. This returns the encrypted message (containing the ciphertext and the encrypted data key).
Encrypt(‘my string’, ‘keyARN’)
Decrypt Function
Inside Integrate.io’s ETL package customers can decrypt data by passing the encrypted message to the Decrypt function with their AWS Key ARN. This returns the decrypted message.
Decrypt(‘my encrypted message’, ‘keyARN’)
Summary
Integrate.io’s platform helps data scientists, data engineers, and business users quickly create their data pipelines with zero coding. AWS KMS helps Integrate.io’s customers further secure their ETL data processing without giving up any security control. To learn more about Integrate.io's field level encryption feature read about How to Encrypt & Decrypt Sensitive Data, Integrate.io's Encrypt function, Integrate.io's Decrypt Function, please contact your Account Manager or email hello@integrate.io.