VAULTLESS TOKENIZATION

Vormetric Data Security Products

Efficiently De-Identify Sensitive Data and Reduce PCI DSS Scope

For today’s IT teams, the time and effort it takes to comply with corporate security policies and compliance mandates like the Payment Card Industry Data Security Standard (PCI DSS) continues to increase—but budgets, resources, and staffing do not. For the last decade, data tokenization offered the potential to help security teams more efficiently address a wide range of security and compliance objectives. However, traditional tokenization tools have introduced a lot of costs and complexity, which prohibited organizations from fully capitalizing on these advantages.

Vormetric offers a better way. Vormetric Vaultless Tokenization with Dynamic Data Masking helps your organization to address its security and compliance objectives, and do so with minimal disruption and administrative overhead. With the solution, you can tokenize primary account numbers and remove them from cardholder data environments and from PCI DSS audit scope. In addition, you can protect personally identifiable information (PII). Plus, by offering persistent security controls, high performance, and predictable per-server pricing, Vormetric Vaultless Tokenization enables your organization to expand its use of tokenization, including in large-scale cloud and big data environments.

Vormetric Vaultless Tokenization makes it easy to use format-preserving tokenization to protect sensitive fields in databases. The solution features a virtual appliance that tokenizes records and manages policies for accessing tokens and clear-text data. The solution features a token server that uses REST APIs for tokenization requests, which streamlines the process of implementing and managing tokenization.

Vormetric Vaultless Tokenization features capabilities that make it fast and easy to add policy-based dynamic data masking to applications. In addition, by leveraging the latest standards-based format preserving encryption (FPE) techniques, the Vormetric solution eliminates the need for a token vault and an associated database. As a result, the solution reduces cost and complexity, enhances performance, and makes it easier to achieve global scale and high availability.

Vormetric Vaultless Tokenization

Vormetric Vaultless Tokenization can tokenize and dynamically mask 
sensitive data according to defined policies.

Key Features

  • Streamlined application integration. The Vormetric Vaultless Tokenization solution employs RESTful APIs to enable developers to add tokenization and dynamic masking operations to applications. This approach streamlines all the application development efforts associated with implementing tokenization and protects the data at its creation.
  • Dynamic data masking. Administrators can establish policies to return an entire field tokenized or dynamically mask parts of a field. For example, a security team could establish policies so that a user with customer service representative credentials would only receive a credit card number with the last four digits visible, while a customer service supervisor could access the full credit card number in the clear.
  • On-demand scalability. The Vormetric token server runs as a virtual appliance, and server instances can be added and removed to accommodate changing performance requirements.
  • Efficient vaultless implementation. The solution features a vaultless approach, which means your teams don’t have to deploy, administer, and synchronize databases that vault tokens. As a result, the solution enables higher performance, easier deployments, and more efficient scalability across global environments.

Vormetric Vaultless Tokenization is part of the Vormetric Data Security Platform, which means you can leverage a single platform for tokenization, encryption, key management, and privileged user access control. As a result, you can employ the mix of technologies that’s optimally suited to your specific projects and use cases, while gaining the cost savings and operational benefits of working with solutions that can be uniformly managed. With Vormetric Vaultless Tokenization, you can work with one platform and one vendor, and avoid unpredictable costs and complex support models.

VIDEO

Demo: Vormetric Tokenization with Dynamic Data Masking

In four minutes learn about the Vormetric Data Security Platform and how Vormetric Tokenization protects your sensitive data...

Watch Now >>

GARTNER NEWSLETTER

Tokenization Research Study

Tokenization Research Study

Tokenization Research Study
Market Guide for Merchant/Acquirer
Tokenization of Payment Card Data

Access Report >>

ANALYST QUOTE

 Technologies like tokenization reduce compliance scope by replacing sensitive data with a non-sensitive token that looks and acts like the original. This means you get data protection without the need to change your databases. Once sensitive data is replaced with the token, these systems are no longer subject to compliance, meaning a lot less work for IT and compliance teams. 

Adrian Lane,
Analyst and CTO,
Securosis
 

SOLUTION BRIEFS

Encryption Architecture

Vormertic Data Security for PCI DSS 3.0 Compliance

Download >>
Encryption Architecture

Vormetric Tokenization with Dynamic Data Masking

Download >>

DATA SHEETS

Vormetric Data Security Platform Data Sheet

Vormetric Data Security Platform

Download >>

WHITE PAPERS

Vormetric Data Security Platform Data Sheet

Vormetric Tokenization with Dynamic Data Masking

Download >>
Fortrex: Evaluation of the Vormetric Token Server

Fortrex: Evaluation of the Vormetric Token Server

Download >>

Gartner Tokenization Newsletter

Customer and Partner Success

  • Rackspace Cloud Partners
  • McKesson
  • AWS
  • Google Compute Engine
  • Microsoft
  • IBM
  • CenturyLink
  • QTS
  • Teleperformance Secures
  • Delta Dental