Case Study: GovTech achieves rapid field-level encryption for sensitive government data with Cossack Labs

GovTech delivers field-level encryption in 12 weeks with Cossack Labs

GovTech, a government technology entity, faced stringent new compliance deadlines requiring them to rapidly implement field-level encryption for sensitive governmental data stored across their large on-premise MySQL infrastructure. Their challenges included protecting over 60 applications without code changes, establishing flexible data access policies, and managing scalable key management, all within a tight 12-week timeline. To meet this, they turned to vendor Cossack Labs and its Acra database security suite.

Cossack Labs implemented a solution using AcraServer as a transparent SQL proxy to encrypt/decrypt data without altering application code, and AcraTranslator as an API for bulk ETL encryption. The solution included FIPS 140-2 compliant cryptography and fine-grained access control based on application identity. This allowed GovTech to quickly meet all regulatory requirements with a minimal performance impact of only 3-6% added latency, securing their governmental contracts and opening new opportunities in regulated domains.

GovTech