Offering
Data security that we plan, implement and operate with you.
Encryption with OpenText SecureData, certificates and keys with Entrust, protection when using AI. We have implemented encryption for companies in the financial and communications sectors.
As a project or operated by us
Format-preserving, for existing applications
Data and keys kept separate
SecureData operated by us in Switzerland
Services
What we protect for you.
From a single database to a cloud application: we design, implement and operate, as a project or as a service.
Applications and databases
Sensitive fields in standard applications, in-house developments and databases are encrypted in a format-preserving way. Digits remain digits, field formats are preserved; we check the integration against your application.
SaaS and cloud
We encrypt the fields to be protected before they go to the cloud or SaaS provider: in the application, via a proxy or via a gateway. At the provider, these fields are stored encrypted. Together with you, we decide where the keys are held: with you, in an HSM or in our operations in Switzerland.
Test data
Test data that keeps the structure and format of the real data. A protected IBAN keeps its structure and, as a rule, does not pass the IBAN check.
View by role
The role decides who sees what in plaintext: customer service, for example, sees the last four digits; analytics sees only protected values.
PKI and certificates
Managing certificates across their entire lifecycle and renewing them automatically, your own certification authorities on-premises or as a service, with the Entrust Cryptographic Security Platform.
Keys and HSM
Managing keys centrally with the Entrust CSP Key Manager (formerly KeyControl), connected to Entrust nShield HSMs to protect the master keys. We also support the generational changeover of HSMs during live operation.
Security for AI
In the protected chat, Praevana replaces recognised names and identifiers with placeholders before the text goes to the external language model. SecureData protects structured fields in databases, SaaS and analytics in a format-preserving way.
Tailored data security
Concept, implementation and consulting for projects with high data security requirements.
Approach
In four steps from assessment to operation.
01
Assess feasibility
Selection of an application (on-premises or in the cloud)
Definition of the fields to be protected and their formats
Encryption in a test environment
Application test: does everything still run?
02
Concept
Solution architecture
Encryption and key concept
Integration of the applications
Test and operating concept
03
Implementation
Encryption and HSM infrastructure
Integration of the applications
Handover to operations
04
Operation
Support for your operations, or operation of the entire service by us
For Entrust products: licences, maintenance and support, with Prewen as first point of contact
Vendor
One point of contact, even when the vendor is involved.
We are a partner of OpenText and a partner of Entrust. For Entrust products, we advise, supply the licences, implement and handle support; Prewen is your first point of contact. If a project requires Entrust's Professional Services, we coordinate them: Entrust delivers as a subcontractor, and your contracting party remains Prewen.
Security principle
Data and keys kept separate.
Encrypted data and key material are stored and protected separately from each other. Anyone who gets hold of only the data finds encrypted values. SecureData derives the key from a master key and the identity instead of storing it: no key is stored per protected value.
Data
encrypted
Keys
protected separately
Initial discussion
Where is your most sensitive data?
In an initial discussion, we clarify which data and applications are your focus and which approach fits.