Case Study: a leading country-scale mass consumer service provider builds a secure PII vault with Cossack Labs

Building a secure data vault for PII protection

A leading country-scale mass consumer service provider faced the challenge of securely storing and processing its customers' sensitive PII. They needed a solution to enforce complex security and compliance requirements automatically, replacing a manual access control process that was exhausting their security team. The provider engaged Cossack Labs and chose to implement its Acra database security suite as the core data security component.

Cossack Labs implemented Acra to create a secure personal data vault, utilizing field-level encryption, secure search over encrypted data, and tokenization. The solution provided different data access levels for trusted and non-trusted applications and enabled secure data sharing with BI teams via masked data. The deployment was completed in just three months, using only 220 hours of developer time versus a budget of 3,800 hours for a bespoke solution. This centralized security control unblocked development and operational processes, allowing compliant use of sensitive data across various business applications.