Enhanced data security with Fujitsu Enterprise Postgres 

Uses Advanced Encryption Standard, a PCI DSS-compliant 256-bit encryption technology that is standard for the credit card industry.

• Faster encryption/decryption by manipulation of entire blocks, instead of one bit at a time. Overhead is further minimized by using AES-NI built into the Intel and AMD processors.
• Encrypt all application data with minimum impact – you no longer need to reduce the scope of encryption to ensure app performance.
• Zero storage overhead, as the algorithm does not alter the size of the object being encrypted.
• Existing applications do not need to be modified - data is automatically decrypted by the instance when read from disk.
• Support for streaming replication - objects encrypted on the primary server are transferred in its encrypted format to the standby.

Minimizes security risk by enabling user-based confidentiality, altering original data while maintaining its usability. Implemented via powerful yet user-friendly policies that can redact different types of data to different types of roles.

• Offline data masking – Transfers data to another DB while applying the specified policies, writing masked data to disk. Suitable for test and partner environments, where it can be used to generate realistic data without exposing sensitive information.
• Online data masking – Applies masking policies dynamically, as data is read from the disk. Used in production to hide sensitive data.

3 types of data redaction: Full masking (redacts the entire specified column with replacement values), partial masking (masks only portion of the specified column), and regular expression masking (applies a regular expression to the column's value).

Extends PostgreSQL's audit capability by allowing the system to save audit records to a separate file. Audit records are written by asynchronous workers, further reducing the overhead of log operations. Easy and efficient way for auditors and data security experts to collect and analyze information on database activity and use it to:

• Comply with regulatory requirements
• Assist in regular monitoring for unauthorized/inappropriate use
• Provide insight into who, how, and when data is accessed
• Demonstrate to customers and regulators that the organization has a comprehensive data management policy in place