Overview

CipherCloud Active Encryption is uniquely suited to enable cloud adoption while providing the highest levels of security. While encryption is used in many contexts, it is only effective if properly deployed, following security best practices. CipherCloud delivers true multi-cloud security policies across multiple clouds and applications.

Many cloud providers encrypt only data at rest; however, encrypting data at rest does not protect against top threats published by the Cloud Security Alliance (CSA), such as credential theft, account hijacking, insecure APIs, privileged users, or forced government disclosure.

To solve these problems, enterprises need data protection that is persistent. With CipherCloud Active Encryption, enterprises decide what to encrypt with granular policy controls, while never relinquishing or sharing the keys. The functionality of encrypted data for searching, sorting, reporting, third-party tools, and controlling data encrypted on mobile devices is preserved.

When cloud providers offer encryption, this only applies to data at rest. This leaves significant exposure as the application, admins, APIs, external processes, and more can always access the clear-text on-demand. By comparison, CipherCloud Active Encryption is persistent and complete, covering data in transit, data in use, and data at rest, as well as data sitting on mobile devices.

In addition, CipherCloud Active Encryption provides a separation of duties. If the cloud provider encrypts and stores data, it can and will access it – intentionally, automatically, by accident, through external tools, or even through court orders.

Finally, our tokenization options meets the most stringent data residency requirements, substituting random values in the cloud, while retaining sensitive data fields in an on-premises database. No cloud provider security solution supports tokenization like CipherCloud. The solution has been deployed by hundreds of regulated organizations in financial, healthcare, government and hitech to meet requirements including GLBA, PCI, HIPAA, and global data privacy laws.