Best Data Masking Software for Microsoft Azure

IRI DarkShield uses several search techniques to find, and multiple data masking functions to de-identify, sensitive data in semi- and unstructured data sources enterprise-wide. You can use the search results to provide, remove, or fix PII simultaneously or separately to comply with GDPR data portability and erasure provisions. DarkShield jobs are configured, logged, and run from IRI Workbench or a restful RPC (web services) API to encrypt, redact, blur, etc., the PII it discovers in: * NoSQL & RDBs * PDFs * Parquet * JSON, XML & CSV * Excel & Word * BMP, DICOM, GIF, JPG & TIFF using pattern or dictionary matches, fuzzy search, named entity recognition, path filters, or image area bounding boxes. DarkShield search data can display in its own interactive dashboard, or in SIEM software analytic and visualization platforms like Datadog or Splunk ES. A Splunk Adaptive Response Framework or Phantom Playbook can also act on it. IRI DarkShield is a breakthrough in unstructured data hiding technology, speed, usability and affordability. DarkShield consolidates, multi-threads, the search, extraction and remediation of PII in multiple formats and folders on your network and in the cloud, on Windows, Linux, and macOS.

Satori is a Data Security Platform (DSP) that enables self-service data and analytics for data-driven companies. With Satori, users have a personal data portal where they can see all available datasets and gain immediate access to them. That means your data consumers get data access in seconds instead of weeks. Satori’s DSP dynamically applies the appropriate security and access policies, reducing manual data engineering work. Satori’s DSP manages access, permissions, security, and compliance policies - all from a single console. Satori continuously classifies sensitive data in all your data stores (databases, data lakes, and data warehouses), and dynamically tracks data usage while applying relevant security policies. Satori enables your data use to scale across the company while meeting all data security and compliance requirements.

IRI FieldShield® is a powerful and affordable data discovery and de-identification package for masking PII, PHI, PAN and other sensitive data in structured and semi-structured sources. Front-ended in a free Eclipse-based design environment, FieldShield jobs classify, profile, scan, and de-identify data at rest (static masking). Use the FieldShield SDK or proxy-based application to secure data in motion (dynamic data masking). The usual method for masking RDB and other flat files (CSV, Excel, LDIF, COBOL, etc.) is to classify it centrally, search for it globally, and automatically mask it in a consistent way using encryption, pseudonymization, redaction or other functions to preserve realism and referential integrity in production or test environments. Use FieldShield to make test data, nullify breaches, or comply with GDPR. HIPAA. PCI, PDPA, PCI-DSS and other laws. Audit through machine- and human-readable search reports, job logs and re-ID risks scores. Optionally mask data when you map it; FieldShield functions can also run in IRI Voracity ETL and federation, migration, replication, subsetting, and analytic jobs. To mask DB clones run FieldShield in Windocks, Actifio or Commvault. Call it from CI/CD pipelines and apps.

Our platform allows businesses to use data, including its application in advanced analysis, machine learning and AI, to do great things without worrying that customers, employees or intellectual property are at risk. The Protegrity Data Protection Platform does more than just protect data. It also classifies and discovers data, while protecting it. It is impossible to protect data you don't already know about. Our platform first categorizes data, allowing users the ability to classify the type of data that is most commonly in the public domain. Once those classifications are established, the platform uses machine learning algorithms to find that type of data. The platform uses classification and discovery to find the data that must be protected. The platform protects data behind many operational systems that are essential to business operations. It also provides privacy options such as tokenizing, encryption, and privacy methods.

Mask, generate, subset, virtualize, and automate your test data with the DATPROF Test Data Management Suite. Our solution helps managing Personally Identifiable Information and/or too large databases. Long waiting times for test data refreshes are a thing of the past.

Don't allow concerns about data security or privacy to obstruct your innovation efforts driven by analytics. Dataguise offers robust protection for personal and sensitive information through adaptable masking and encryption solutions, ensuring you can maximize business value. With data sets prepared for analysis delivered in near real-time, you can gain fresher insights and make informed decisions based on a complete understanding of your data landscape. Recognizing the diverse and evolving needs of our customers, Dataguise has built a strong network of carefully selected partners to provide more comprehensive solutions, services, and expertise. This executive guide illustrates how to safeguard data privacy while enhancing data value. When looking at various data discovery solutions, it's clear that Dataguise has a longer history, accommodates a wider array of data types and repositories, achieves lower false-positive rates, and consistently scans data at scale more effectively. By choosing Dataguise, organizations can confidently harness their data to drive decisions that best serve their business objectives, ultimately fostering a culture of informed and strategic decision-making.

Unlike most data management systems, PHEMI Health DataLab is built with Privacy-by-Design principles, not as an add-on. This means privacy and data governance are built-in from the ground up, providing you with distinct advantages: Lets analysts work with data without breaching privacy guidelines Includes a comprehensive, extensible library of de-identification algorithms to hide, mask, truncate, group, and anonymize data. Creates dataset-specific or system-wide pseudonyms enabling linking and sharing of data without risking data leakage. Collects audit logs concerning not only what changes were made to the PHEMI system, but also data access patterns. Automatically generates human and machine-readable de- identification reports to meet your enterprise governance risk and compliance guidelines. Rather than a policy per data access point, PHEMI gives you the advantage of one central policy for all access patterns, whether Spark, ODBC, REST, export, and more

Maintain the essence, structure, and accuracy while ensuring confidentiality. Improve data security by anonymizing and altering sensitive information, as well as implementing pseudonymization strategies for adherence to privacy regulations and analytics purposes. The obscured data continues to hold its context and referential integrity, making it suitable for use in testing, analytics, or support scenarios. Serving as an exceptionally scalable and high-performing data masking solution, Informatica Persistent Data Masking protects sensitive information—like credit card details, addresses, and phone numbers—from accidental exposure by generating realistic, anonymized data that can be safely shared both internally and externally. Additionally, this solution minimizes the chances of data breaches in nonproduction settings, enhances the quality of test data, accelerates development processes, and guarantees compliance with various data-privacy laws and guidelines. Ultimately, adopting such robust data masking techniques not only protects sensitive information but also fosters trust and security within organizations.

TrueVault is a pioneering data security firm solely dedicated to safeguarding Personally Identifiable Information (PII). By separating consumer identity from their behaviors, TrueVault aims to mitigate risks associated with data security and compliance, ensuring that companies only retain the necessary data. As businesses accumulate more information to enhance their operations, they simultaneously elevate their exposure to risk and potential liabilities. Designed by legal professionals, our software provides a comprehensive, step-by-step approach to achieving compliance with the CCPA. Regardless of whether your enterprise is an e-commerce platform or a SaaS provider, TrueVault Polaris ensures that your business reaches full compliance at a fixed price. If we fail to achieve this, we promise a complete refund without any inquiries. From initial compliance to managing consumer requests, TrueVault Polaris is your guide through the entire process, simplifying each step. If you can navigate online tax filing, then achieving full compliance with your business is equally attainable. With TrueVault, you can focus on growing your business while we handle the complexities of data security.

IRI Voracity is an end-to-end software platform for fast, affordable, and ergonomic data lifecycle management. Voracity speeds, consolidates, and often combines the key activities of data discovery, integration, migration, governance, and analytics in a single pane of glass, built on Eclipse™. Through its revolutionary convergence of capability and its wide range of job design and runtime options, Voracity bends the multi-tool cost, difficulty, and risk curves away from megavendor ETL packages, disjointed Apache projects, and specialized software. Voracity uniquely delivers the ability to perform data: * profiling and classification * searching and risk-scoring * integration and federation * migration and replication * cleansing and enrichment * validation and unification * masking and encryption * reporting and wrangling * subsetting and testing Voracity runs on-premise, or in the cloud, on physical or virtual machines, and its runtimes can also be containerized or called from real-time applications or batch jobs.

Renowned startpoint security software products in the IRI Data Protector suite and IRI Voracity data management platform will: classify, find, and mask personally identifiable information (PII) and other "data at risk" in almost every enterprise data source and sillo today, on-premise or in the cloud. Each IRI data masking tool in the suite -- FieldShield, DarkShield or CellShield EE -- can help you comply (and prove compliance) with the CCPA, CIPSEA, FERPA, HIPAA/HITECH, PCI DSS, and SOC2 in the US, and international data privacy laws like the GDPR, KVKK, LGPD, LOPD, PDPA, PIPEDA and POPI. Co-located and compatible IRI tooling in Voracity, including IRI RowGen, can also synthesize test data from scratch, and produce referentially correct (and optionally masked) database subsets. IRI and its authorized partners around the world can help you implement fit-for-purpose compliance and breach mitigation solutions using these technologies if you need help. ​

Multi-cloud data security with a single pane of glass Industry's first SaaS access governance solution. Cloud is fragmented and data is scattered across different systems. Sensitive data is difficult to access and control due to limited visibility. Complex data onboarding hinders data scientist productivity. Data governance across services can be manual and fragmented. It can be time-consuming to securely move data to the cloud. Maximize visibility and assess the risk of sensitive data distributed across multiple cloud service providers. One system that enables you to manage multiple cloud services' data policies in a single place. Support RTBF, GDPR and other compliance requests across multiple cloud service providers. Securely move data to the cloud and enable Apache Ranger compliance policies. It is easier and quicker to transform sensitive data across multiple cloud databases and analytical platforms using one integrated system.

OpenText Data Privacy & Protection Foundation (Voltage) enables organizations to secure sensitive information with a modern, quantum-resilient approach that supports both operational continuity and regulatory compliance. Instead of relying on traditional encryption that breaks workflows, it uses NIST-approved, format-preserving methods that preserve data usability while protecting high-value fields. The platform provides persistent protection, securing data no matter where it lives or how it moves—across cloud infrastructures, analytics pipelines, and distributed applications. With stateless key management, performance stays high even at massive volumes, making it ideal for enterprise-scale deployments. Global organizations trust OpenText because its technologies meet stringent certifications, including FIPS 140-2, Common Criteria, and NIST SP 800-38G. Deep integrations across AWS, Azure, Google Cloud, Snowflake, Hadoop, Databricks, and more ensure seamless adoption without architectural overhaul. This enables businesses to modernize, migrate, or analyze data safely without exposing sensitive information. Ultimately, the platform helps reduce compliance risk, streamline governance, and future-proof data protection strategies.

Complexity is the enemy of security. Simplify and scale fine-grained data access control. Dynamically authorize and audit every query to comply with data security and privacy regulations. Okera integrates seamlessly into your infrastructure – in the cloud, on premise, and with cloud-native and legacy tools. With Okera, data users can use data responsibly, while protecting them from inappropriately accessing data that is confidential, personally identifiable, or regulated. Okera’s robust audit capabilities and data usage intelligence deliver the real-time and historical information that data security, compliance, and data delivery teams need to respond quickly to incidents, optimize processes, and analyze the performance of enterprise data initiatives.

Pathlock has transformed the market through a series strategic mergers and acquisitions. Pathlock is changing the way enterprises protect their customer and financial data. Pathlock's access orchestration software supports companies in their quest to Zero Trust by alerting them to violations and taking steps to prevent loss. Pathlock allows enterprises to manage all aspects related to access governance from one platform. This includes user provisioning and temporary elevation, ongoing User Access Review, internal control testing, continuous monitoring, audit preparation and reporting, as well as user testing and continuous controls monitoring. Pathlock monitors and synthesizes real user activity across all enterprise apps where sensitive activities or data are concentrated, unlike traditional security, risk, and audit systems. It identifies actual violations and not theoretical possibilities. All lines of defense work together to make informed decision with Pathlock as their hub.

Libelle DataMasking (LDM) is a powerful, enterprise-level solution designed for the automated anonymization of sensitive personal information, including names, addresses, dates, emails, IBANs, and credit card details, converting them into realistic substitutes that preserve logical consistency and referential integrity across both SAP and non-SAP environments such as Oracle, SQL Server, IBM DB2, MySQL, PostgreSQL, SAP HANA, flat files, and cloud databases. With the capability to handle up to 200,000 entries per second and facilitate parallel masking for extensive datasets, LDM employs a multithreaded architecture, ensuring efficient reading, anonymization, and writing of data with exceptional performance. The solution boasts over 40 predefined anonymization algorithms—including those for numbers, alphanumeric characters, date shifting, and various forms of masking for names, emails, IBANs, and credit cards—along with tailored templates specifically designed for SAP modules like CRM, ERP, FI/CO, HCM, SD, and SRM. Additionally, its scalability and flexibility make it suitable for organizations of all sizes looking to enhance their data security measures.

Subsalt represents a groundbreaking platform specifically designed to facilitate the utilization of anonymous data on a large enterprise scale. Its advanced Query Engine intelligently balances the necessary trade-offs between maintaining data privacy and ensuring fidelity to original data. The result of queries is fully-synthetic information that retains row-level granularity and adheres to original data formats, thereby avoiding any disruptive transformations. Additionally, Subsalt guarantees compliance through third-party audits, aligning with HIPAA's Expert Determination standard. It accommodates various deployment models tailored to the distinct privacy and security needs of each client, ensuring versatility. With certifications for SOC2-Type 2 and HIPAA compliance, Subsalt has been architected to significantly reduce the risk of real data exposure or breaches. Furthermore, its seamless integration with existing data and machine learning tools through a Postgres-compatible SQL interface simplifies the adoption process for new users, enhancing overall operational efficiency. This innovative approach positions Subsalt as a leader in the realm of data privacy and synthetic data generation.