Protect Data and Ensure Need-to-Know Access Anywhere & Everywhere

Data Access Security

Talk to an Expert

Ensure privacy and protection of data with real time segregation and dynamic data masking

NextLabs Data Access Enforcer (DAE) allows companies to dynamically enforce policies independent of application, UI, API, Microservice, batch job, and application function; regardless of how the data is being accessed.

Enforce Data Privacy

Enforce dynamic data masking and segregation controls

Ensure and Streamline Compliance

Comply with industry regulations including GDPR, ITAR/EAR, and SOX

Improve Business Agility

Secure data anywhere with a single policy

Reduce Security and Compliance Management Costs

Eliminate the need for custom code

EXPLORE DAE

Why Data Access Enforcer?

Record-Level Dynamic Data Filtering

DAE segregates data dynamically based on policy by shielding data from unauthorized users until access is granted. Authorization can be determined based on the industry, location, department, position, project assignment, or any other attribute of the user.

Field-Level Dynamic Data Masking

Dynamic Data masking is the process of hiding original data with modified content to protect data that is sensitive dynamically based on attribute-based policy. Data Access Enforcer (DAE) ensures that users can only view the fields on the record to which they have been granted access. For those not granted access, the value of the field will be masked.

Database operation & Data Manipulation Control

DAE uses attribute-based policies to control Create, Read, Update and Delete (CRUD) operations regardless of how or where the data is being accessed. Users can be given permission to view a set of data and other entities while being authorized to edit, create, or delete only a subset of these records.

Rapid Time to Value

DAE can be deployed and configured for your specific use cases in under 4 weeks, much quicker than alternatives. This is because policies are managed centrally, and no custom code is required.

Fiserv's Implementation Story

Read our case study to learn how Fiserv safeguard financial and customer data with dynamic data anonymization and segregation.

Data is one of the most important assets in today’s organizations. As mentioned, logical data segregation stands out as a simple solution for organizations seeking to safeguard valuable data assets, comply with regulations, and maintain a strong security posture. Flexible and scalable data security solutions as such are essential to adapt to changing requirements while maintaining security in a dynamic digital environment.

For Fiserv, a leading Fintech company, it was critical to be able to securely collaborate and share confidential information, such as customer and financial data, while also retaining agility and cost control. Learn how Fiserv was able to safeguard the confidentiality and integrity of its data using logical data segregation.

Resources:

TALK TO EXPERT

Data Access Enforcer Products

DAE for SAP ERP

NextLabs Data Access Enforcer for SAP ERP (DAE for SAP) provides dynamic data-level security controls and fine-grained data access governance for SAP applications. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for SAP. DAE for SAP enforces data-level security controls – such as field-level dynamic data masking, record-level data filtering, and monitors data access activity directly from within the data access layer of the SAP S/4 HANA and SAP ECC.

DAE for SAP complements SAP Dynamic Authorization Management (SAP DAM), which operates at the application layers of the SAP S/4 HANA and SAP ECC. DAE is UI, API, microservice, batch job, report, Transaction, and Fiori app independent and will support any UI with a single set of policies within a single solution.

DAE for SAP prevents unauthorized access to sensitive SAP data through fine-grained data-level security controls, protecting data, and addressing compliance requirements at the same time. DAE for SAP enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for SAP HANA

NextLabs Data Access Enforcer for SAP HANA (DAE for SAP HANA) provides dynamic data-level security controls and fine-grained data access governance for SAP HANA, whether it is being accessed through an SAP application or directly. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for SAP HANA. DAE for SAP HANA enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for SAP HANA prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for SAP HANA enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for SAP HANA leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Linux

NextLabs Data Access Enforcer for Linux (DAE for Linux) provides dynamic data-level security controls and fine-grained data access governance for Linux applications that use ODBC/JDBC. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for ODBC and JDBC applications on Linux. DAE for Linux enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for Linux prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Linux enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Linux leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Windows

NextLabs Data Access Enforcer for Windows (DAE for Windows) provides dynamic data-level security controls and fine-grained data access governance for Windows Desktop and Server applications that access external databases such as Excel, SQL Developer, DBeaver, Tableau, Power BI, SQL Server Management Studio, and SQL*Plus. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for Windows applications. DAE for Windows enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

As an inline integration with ODBC, .NET, and SQL*Net, DAE for Windows prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Windows enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Windows leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Oracle

NextLabs Data Access Enforcer for Oracle (DAE for Oracle) provides dynamic data-level security controls and fine-grained data access governance for Oracle by serving as a SQL*Net proxy, allowing all calls from an Oracle Client to an Oracle Database to be evaluated against DAE’s data access policies. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for Oracle. DAE for Oracle enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer where SQL*Net operates.

DAE for Oracle prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Oracle enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Oracle leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Oracle ERP

NextLabs Data Access Enforcer for Oracle ERP (DAE for Oracle ERP) provides dynamic data-centric security controls and fine-grained data access governance for Oracle EBS and Oracle Fusion. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policies that are business process-aware and centralized policy management to improve their security and compliance posture for all Oracle ERP applications. DAE for Oracle ERP enforces data-level security controls – such as field-level data masking and record level data segregation and monitors data access activity directly from within the data access layer of Oracle EBS and Oracle Fusion.

DAE for Oracle ERP prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Oracle ERP enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility. The Out of the Box (OOTB) integration with Oracle EBS and Oracle Fusion makes data policy enforcement completely transparent to business users, requiring no changes to business processes.

DAE for PostgreSQL

NextLabs Data Access Enforcer for PostgreSQL (DAE for PostgreSQL) provides dynamic data-level security controls and fine-grained data access governance for PostgreSQL by serving as a database proxy, allowing all calls from an ODBC/JDBC Client to a PostgreSQL Database to be evaluated against DAE’s data access policies. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for PostgreSQL. DAE for PostgreSQL enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for PostgreSQL prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for PostgreSQL enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for PostgreSQL leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Microsoft and Azure SQL

NextLabs Data Access Enforcer for Microsoft and Azure SQL (DAE for Microsoft and Azure SQL) provides dynamic data-level security controls and fine-grained data access governance for both Microsoft SQL and Azure SQL. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for both Microsoft SQL and Azure SQL. DAE for Microsoft and Azure SQL enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for Microsoft and Azure SQL prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Microsoft and Azure SQL enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Microsoft and Azure SQL leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for BigQuery

NextLabs Data Access Enforcer for BigQuery (DAE for BigQuery) provides dynamic data-level security controls and fine-grained data access governance for BigQuery. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for BigQuery. DAE for BigQuery enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for BigQuery prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for BigQuery enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for BigQuery leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Siemens Teamcenter

NextLabs Data Access Enforcer for Siemens Teamcenter (DAE for Siemens Teamcenter) provides dynamic data-level security controls and fine-grained data access governance for Siemens Teamcenter. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for Teamcenter, with policies based on the identity of the Teamcenter user. DAE for Siemens Teamcenter enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for Siemens Teamcenter prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Siemens Teamcenter supports both Oracle and SQL Server databases out of the box, so no custom code is required regardless of whether a Teamcenter deployment is using Oracle or SQL Server as its database.

DAE and Dynamic Data Masking

Dynamic Data Masking refers to masking of data where the decision on whether to mask the data in question is determined at the time of the data access request and is based on attribute values of the user requesting access, the data itself, and the environment or context in which the request is being made. Other terms that are often used to refer to data masking include anonymization, obfuscation, and tokenization, although these terms are sometimes defined slightly differently depending on context.

Related Links:

Enforcing Protection at the Data Access Level

Upholding the integrity of critical data assets is paramount for enterprises as cybersecurity threats evolve. Implementing dynamic data masking provides an extra layer of security by selectively obfuscating sensitive information in real-time, ensuring that only authorized users see the complete data set.

Dynamic data masking works by defining policies based on attributes of the user requesting access to the data, the data itself, and the context or environment of the request. To learn more about how dynamic data masking works, its implementation, and benefits, explore our article.

Petrobras-Customer-Case-Study-final.pdf

Data Access Enforcer (DAE)

FEATURES
Dynamic Data Filtering controls	Segregates and shields data from unauthorized users until access is granted. Authorization can be determined based on policies that examine attributes of the data being accessed, the context of the request, and user identity. Control what users can do with filtered rows in database tables Filter the database rows by operation (e.g., Select, Update, Delete) such that users cannot select, update, or delete rows that have been filtered
Database operation and data manipulation controls	Control what database operations user is authorized to perform Uses attribute-based policies to control Create, Read, Update and Delete (CRUD) operations Block by operation (e.g., Insert, Execute) such that users cannot insert a base table or call a stored procedure
Dynamic Data Masking Controls	Ensures that users can only view the fields on the record to which they have been granted access. For those not granted access, the value of the fields will be masked Block user to update the masked fields
Support for multiple database APIs	Access via OBDC, JDBC, or REST APIs
Support for multiple data sources	Ability to enforce policies with user attributes that can come from Active Directory or the database itself
Centralized auditing and reporting	Auditing and reporting in Control Center on all the database request and actions performed

BENEFITS
Protect data and simplified access control	Ensure privacy and protect data with dynamic data segregation and masking controls Externalize authorization management to simplify and reduce the time spent on administering access control policies
Enhanced business agility	React more rapidly to changes in business requirements, market conditions, or regulatory environment since policy changes can be made without requiring code changes or application downtime
Higher ROI by leveraging existing IT investments	Lower your total cost of ownership as you can leverage your existing investment in the NextLabs platform
Reduced compliance costs	Reduce the cost of compliance through more efficient and cost-effective monitoring and audit of your data

Mitigating Today’s Access Control Challenges with Dynamic Data Masking and Filtering

Ensuring data protection from unauthorized users is not only important for security, but also for compliance with a variety of regulations. Automating dynamic data masking and data segregation allows enterprises to enforce preventive controls to mitigate the risk of data breach, while ensuring compliance.

Using a data access security solution that allows for real-time enforcement, enterprises can mask and segregate sensitive information from unauthorized users. In doing so, it enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility. Watch how sensitive data can be dynamically masked and segregated based upon attributes such as user citizenship, certification, computer system, location, etc. to prevent unauthorized access.