On top of the standard cybersecurity practices you would expect, Remynt uses a data privacy vault to isolate, secure, store, and tightly control access to your sensitive data. Using the analogy of a home, a data privacy vault is like using a safe to store your most valuable documents while having locks on your doors.
Data privacy vault architecture is recommended by the IEEE (Institute of Electrical and Electronics Engineers), the professional association that sets industry standards. To learn more about data privacy vaults, please see this article published by the IEEE in October 2022.
Who Else Uses a Data Privacy Vault?
You may wonder if the data privacy vault architectural pattern is recommended; why haven’t you seen this approach used more frequently?
Many top security technologies and companies that are leaders in data security use this architectural pattern. When you pay through Google Pay, Apple Pay, or Samsung Pay, you rely on a vault to secure and tokenize your credit card data while delivering a seamless and smooth user experience.
Outside of payment card use cases, Netflix has built several data vaults to protect sensitive customer data, as have Goldman Sachs and Adyen – to name just a few.
How Exactly Does Having a Data Privacy Vault Help Remynt Better Protect Your Sensitive Data?
Data privacy vault helps us better protect your sensitive data by providing the following:
- Best-In-Class Data Privacy and Security: Our data privacy vault makes the sensitive data sought by malicious actors much harder to access by isolating this data in a zero-trust secure environment rather than replicating it across our systems and services. Instead of replicating sensitive data, our systems and services use tokens as stand-ins for this data. Your sensitive data is encrypted using a military-grade AES-256 standard at rest, in transit, and in memory (this last aspect exceeds current certification and compliance requirements).
- Run Workflows without Decrypting Your Sensitive Data: Our data privacy vault is equipped with polymorphic encryption, an encryption technique that lets us run workflows without decrypting sensitive data. This means we can perform functions like verifying your date of birth or SSN, or checking that a credit score is above a certain threshold without ever decrypting your sensitive data.
- Centralized Sensitive Data Governance: We use a data privacy vault rather than having a fragmented approach to sensitive data governance, with data governance controls configured on every system and service. This vault lets us centrally control access to this data, so data governance control is set from one place and one place only. According to zero-trust principles, your sensitive data can only be accessed by systems and services that are explicitly authorized. Because our access controls are configured using an intuitive and human-readable policy expression language, we can easily ensure that access controls are correct and consistently applied.
- Audit Logging and Monitoring: Our data privacy vault provides detailed audit logs that capture how your sensitive data is used – which data elements, by which users or services, and at what time. We proactively monitor how your sensitive data is used so that we can catch any suspicious activity early before a potential data breach occurs.
- Your Right to be Forgotten: Centralizing sensitive data in a data privacy vault lets us easily keep an accurate and comprehensive inventory of all this data. This means that if you discontinue using our services, we can use our data privacy vault to ensure the total deletion of your sensitive personal data upon request. You don’t have to worry about copies of your sensitive data remaining in our systems because we kept it centralized from day one so that it’s easy to ensure complete data deletion.
- Certifications and Compliance: Our data privacy vault is PCI Level 1, SOC 2 Type 1, and SOC 2 Type 2 certified; it’s designed to enable HIPAA and GDPR compliance because it was built with an in-depth understanding of these laws and regulations. We continuously update the vault as laws and regulations evolve.
- Network Isolation for Control Plane and Data Plane: We follow the security practice of isolating our data privacy vault’s control plane and data plane to eliminate the general-purpose attack vector.
Side-by-Side Comparison Against Other Data Protection Architectures