Case Study: a global fintech SaaS company protects sensitive multi-tenant data with Baffle Data Protection for SaaS

Global Fintech Softwareas-a-service Provider Protects Sensitive Data In Multi-tenant Cloud

A leading cloud-based financial software-as-a-service (SaaS) provider needed to protect sensitive customer data in its multi-tenant Amazon Aurora environment. Their challenge was to offer customers, especially those who required complete control, the flexibility to bring, rotate, and revoke their own encryption keys. This need was compounded by their transition from a monolithic to a microservices architecture, which required a highly performant and scalable security solution. They chose to implement Baffle Data Protection for SaaS to meet these requirements.

Baffle implemented a row-level encryption solution where each customer's data is encrypted with a unique key, providing logical data segmentation. Customers can manage their own Key Encryption Keys (KEKs) through a self-service portal, giving them the power to effectively shred data by revoking access. The solution, which has been in production for years, protects terabytes of data and billions of records. This high level of security assurance helped the SaaS provider meet the demands of existing customers and win new business, solidifying its leadership position.