Databolt

While field-level encryption and access controls are crucial to secure sensitive data, they can leave the door open for bad actors. Capital One Databolt mitigates these threats by swapping sensitive information such as PII with tokens: data elements that are meaningless externally but maintain usefulness for querying and analytics. Unlike legacy tokenization solutions, Databolt is designed for the cloud: it is a purpose-built, cloud-native solution designed with Capital One's own needs in mind. As one of the largest users of Snowflake in the world, we developed Databolt with high performance, low latency, and the highest levels of security and privacy in mind.

<br/>Databolt is a hybrid-SaaS vaultless data tokenization solution. It can integrate tokenization directly into your existing Snowflake workflows, allowing you to securely leverage data for analysis and AI. Data can be tokenized before or after ingestion into Snowflake, and detokenized as needed only by authorized roles.

<br/>Highlights:

- High performance and low latency for queries and analytics
- Secure architecture, where tokenized data never leaves your environment
- Available as a Snowflake Native App for easy deployment and management
- Integrated with Snowflake RBAC for easy user management

<p><br/></p>

# Expected Workflow

Getting started with Databolt for Snowflake requires initial setup and configuration in the Capital One Software customer portal in order to define product functionality and access privileges within the customer’s Snowflake account. During this process, the Capital One Software onboarding team will collaborate with you to define and implement necessary configurations.

## Onboarding and Initialization

Work directly with Capital One Software to gain access to the Capital One Software customer portal, where you can begin setting up their tokenization environment.

## Configuration Definition

Collaborate with Capital One Software associates to define your tokenization configuration, including types of data to be tokenized, and access policies that define which Snowflake roles have access to tokenize and detokenize Snowflake data.

## Setting Up The Tokenization Engine

The Databolt Native App, with the help of Capital One Software associates, will guide you through setting up your tokenization engine using the above-mentioned configuration, and it will supply tools for interfacing with the tokenization engine from within your Snowflake environment.

<p><br/></p>

## Privileges and References

SPCS Installation Requirements

```javascript
BIND SERVICE ENDPOINT
```

```javascript
CREATE COMPUTE POOL
```

```javascript
USAGE ON EXTERNAL ACCESS INTEGRATION
```

External Functions Requirements

```javascript
USAGE ON API INTEGRATION
```

<p><br/></p>

原始信息汇总

数据集概述：Databolt

提供商

• Capital One Software

数据集描述

Databolt是一个专为Snowflake设计的云原生数据令牌化解决方案，用于保护敏感数据。通过将PII等敏感信息替换为令牌，既保证了数据的安全性，又不影响查询和分析功能。

主要特点

• 高性能、低延迟的查询和分析
• 安全架构，令牌化数据不会离开用户环境
• 可作为Snowflake原生应用轻松部署和管理
• 与Snowflake RBAC集成，便于用户管理

预期工作流程

1. 初始设置和配置：在Capital One Software客户门户中定义产品功能和访问权限。
2. 配置定义：与Capital One Software合作定义令牌化配置和数据访问策略。
3. 令牌化引擎设置：通过Databolt原生应用设置令牌化引擎。

业务需求

• 数据安全和隐私：通过令牌化增强数据安全和隐私。
• 风险缓解：减少存储在Snowflake中的敏感数据量，降低数据泄露风险。
• 安全业务分析：令牌化数据保持引用完整性，支持JOIN和GROUP BY操作。
• 数据共享：降低共享数据集的障碍。
• 低延迟分析：支持每秒高达800万次令牌化操作。

使用示例

sql SELECT DATABOLT.FUNCTIONS.TOKENIZE(<field name>, <field value>); SELECT DATABOLT.FUNCTIONS.DETOKENIZE(<field name>, <tokenized value>);

技术需求

• SPCS安装要求：
  • BIND SERVICE ENDPOINT
  • CREATE COMPUTE POOL
  • USAGE ON EXTERNAL ACCESS INTEGRATION
• 外部功能要求：
  • USAGE ON API INTEGRATION

数据更新频率

• 每日更新

时间覆盖范围

• 最近1年，按天

地理覆盖范围

• 美国，按国家

云区域可用性

• AWS：
  • US East (N. Virginia)
  • US East (Ohio)
  • US West (Oregon)
• Azure：
  • Central US (Iowa)
  • 其他5个区域

联系方式

• 销售：[e-mail]
• 支持：[e-mail]

法律条款

• 离线