MIME-Version: 1.0
References: <CAC5iy63SkK=C2f4Z+C9110brQPKEGLxpOn8fLnPs4A2vsMmpAA@mail.gmail.com>
In-Reply-To: <CAC5iy63SkK=C2f4Z+C9110brQPKEGLxpOn8fLnPs4A2vsMmpAA@mail.gmail.com>
From: Ron Johnson <ronljohnsonjr@gmail.com>
Date: Tue, 11 Mar 2025 22:03:50 -0400
Message-ID: <CANzqJaBUFoVZw+AS9Rc4OQ67NNzzsPdLvD2SSb8J9KpR=kXogQ@mail.gmail.com>
Subject: Re: hide data from admins
To: "pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000800c5106301b9e0f"
Archived-At: <https://www.postgresql.org/message-id/CANzqJaBUFoVZw%2BAS9Rc4OQ67NNzzsPdLvD2SSb8J9KpR%3DkXogQ%40mail.gmail.com>
Precedence: bulk

--000000000000800c5106301b9e0f
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Tue, Mar 11, 2025 at 9:48=E2=80=AFPM Siraj G <tosiraj.g@gmail.com> wrote=
:

> Hello Experts!
>
> What are the features available in Postgresql to hide PII (personal
> identifiable information) from the Admin team? Like in Oracle we have dat=
a
> vault and data redaction, I am looking for similar features in
> PostgreSQL.We do not want to do code level changes.
>

Look at pgsodium.  However, "no code level changes" is code for at-rest
encryption.

--=20
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

--000000000000800c5106301b9e0f
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Tue, Mar 11, 2025 at 9:48=E2=80=AFPM S=
iraj G &lt;<a href=3D"mailto:tosiraj.g@gmail.com">tosiraj.g@gmail.com</a>&g=
t; wrote:</div><div class=3D"gmail_quote gmail_quote_container"><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px so=
lid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">Hello=C2=A0Experts!=
<br><div><br></div><div>What are the features available in Postgresql to hi=
de PII (personal identifiable information) from the Admin team? Like in Ora=
cle we have data vault and data redaction, I am looking for similar feature=
s in PostgreSQL.We do not want to do code level changes.</div></div></block=
quote><div><br></div><div>Look at pgsodium.=C2=A0 However, &quot;no code le=
vel changes&quot; is code for at-rest encryption.</div></div><div><br></div=
><span class=3D"gmail_signature_prefix">-- </span><br><div dir=3D"ltr" clas=
s=3D"gmail_signature"><div dir=3D"ltr">Death to &lt;Redacted&gt;, and butte=
r sauce.<div>Don&#39;t boil me, I&#39;m still alive.<br><div><div>&lt;Redac=
ted&gt; lobster!</div></div></div></div></div></div>

--000000000000800c5106301b9e0f--