Strong encryption is the last line of defense in data protection. EncryptRIGHT software delivers strong data security with a primary focus on application level data encryption, and also supports encrypting databases with transparent data base encryption (TDE) and encrypting files for transfer or backup, protecting sensitive data regardless of where it is used, moved or stored.

The EncryptRIGHT® Tokenization software solution offers robust data protection functionality for pseudonymization and anonymization of sensitive data by substituting surrogate data elements in place of Personally Identifiable Information (PII) and other sensitive data — that is, to replace things like credit card numbers, Social Security numbers, healthcare data, and other sensitive information with surrogate “tokens”. The tokens, not the original sensitive information, can be used by and shared with the various systems, applications or sites that may need access to the information, while the original data remains secured and contained.

EncryptRIGHT can apply data masks to uniquely obscure parts of a piece of data in the manner appropriate for each user who is authorized to access and unsecure sensitive data to enforce appropriate data privacy.

Comprehensive data protection is more than just algorithms and keys, it is also about defining and enforcing data access controls. EncryptRIGHT leverages strong role-based access controls to define who has access to sensitive data, assign appropriate data access permissions and easily orchestrate unlocking the protected data in a need-to-know manner – allowing each user to access data only to the extent to which they are authorized. This is a key component to the data security governance approach to protecting data.

Data access controls start with defining users and permissions. In EncryptRIGHT, users and logical user groups can be defined and assigned unique permissions. Since every function of EncryptRIGHT, requires a valid User ID and password, role-based data access controls can be applied in real time to authorize user access to a specific function. This is integral to data masking and managing data privacy.

Encryption Key Management

EncryptRIGHT includes a comprehensive, centralized encryption key management system for orchestrating all cryptographic keys related to data protection, including the ability to generate, exchange, distribute, store, rotate, temporarily suspend, revoke, and destroy cryptographic keys for all of the data EncryptRIGHT touches.