Baffle

Data Tokenization: Baffle supports a length preserving and data type preserving tokenization method to anonymize data at the field level databases or in semi-structured data files in cloud data lakes.Record Level Encryption: Baffle can be configured for record level encryption to support multiple keys within a single column that are mapped to respective data owners or entities. This encryption mode can be used effectively in multi-tenant or shared data environments where segmenting data can be challenging.

In this mode, data shredding can be enabled by deleting public keys and private keys for a respective entity
Data Masking: Baffle can enable simplified data masking to prevent decryption of data and sensitive file information based on configuration or deleted keys. This mode can minimize data exposure in test/dev environments and better control data exfiltration to external parties.