Carduus | Tokenization Software | Open Privacy Preserving Record Linkage |

NOTICE: The carduus solution has been superceeded by the new and improved [spindle-token](https://marketplace.databricks.com/details/d8c665ec-bc85-4341-b5f4-7099b5cf6261/Spindle-Health_Spindle-Token-Open-Privacy-Preserving-Record-Linkage-Spindle-Health) solution. Carduus continues to be available and functional for all users, however spindle-token contains additional functionality -- including interoperability with carduus -- and future development will focused on spindle-token. You can find the spindle-token on the Databricks marketplace [here](https://marketplace.databricks.com/details/d8c665ec-bc85-4341-b5f4-7099b5cf6261/Spindle-Health_Spindle-Token-Open-Privacy-Preserving-Record-Linkage-Spindle-Health).

**Overview**

The Open Privacy Preserving Record Linkage (OPPRL) protocol is a free and open standard for replacing personally identifiable information (PII) with encrypted tokens in order to preserve the privacy of data subjects. This capability is often refered to as "tokenization".

Healthcare and life sciences organizations use tokanization when sharing granular health data in order to associate records pertaining to the same subject without disclosing the subject's identity. It is a crucial component to preserving patient privacy.

[Spindle Health](https://spindlehealth.com/) has developed a free, open source, and scalable implementaiton of the OPPRL protocol, called [carduus](https://spindle-health.github.io/carduus/). It is a Databricks compatible Python package.

**Use cases**

* Replacing PII with encrypted tokens prior to disclosing sensitive data.
* Facilitating the safe transfer of data between trusted parties, even without a secure connection.
* Isolating each organizations tokens to mitigate inter-organizational risk associated with data breaches.

**Product details**

The provided notebooks serve as user guides for how to install, setup, and use all the funcationality of carduus. You can find more documentation on the [carduus website](https://spindle-health.github.io/carduus/).

Bug reports and feature requests can be made on the project's [github page](https://github.com/Spindle-Health/carduus).

If you need additional help onboarding carduus or the OPPRL, please [reach out to Spindle Health](https://spindlehealth.com/tokenization).

**FAQ**
*What is Tokenization?*
Tokenization is a method of protecting sensitive data by replacing it with a unique token. The goal of tokenization is to obfuscate identifying attributes or other sensitive information about the subjects described in the records of a dataset while still preserving the ability to link records pertaining to the same subject through the use of an encrypted token. The Carduus tokens are not reversible.

This practice is sometimes referred to as Privacy Preserving Record Linkage (PPRL) and is one of the components of data de-identification. Spindle created the first open standard, hence Open Privacy Preserving Record Linkage (OPPRL).

*Can Carduus render my data fully de-identified?*
Carduus provides token capabilities. For full de-identification, [reach out to Spindle Health](https://spindlehealth.com/tokenization).