Overview
Protect sensitive data for development, testing, analytics and AI/ML ops without compromising on data quality and innovation with DataMasque. Automatically discover and mask sensitive data - including PII, PHI and PCI - to generate privacy compliant, realistic and irreversible synthetically identical data. No matter where your data lives - in databases, files, the cloud, on-prem or across environments - DataMasque ensures it is masked consistently. DataMasque supports masking of primary and unique keys and automatically maintains referential integrity of foreign keys.
Highlights
- Optimised for self-service automation - integrates seamlessly into existing IT management services.
- Drives consistency across tables, databases and database engines.
- Cryptographically secure SHA-512 salted hash to drive irreversibility.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Databricks SQL Warehouse Support
DataMasque can now mask data held in Databricks SQL Warehouse databases.
IBM Informix Support
DataMasque can now mask data held in IBM Informix databases.
PowerPoint Presentation Masking
The unstructured_text mask now masks Microsoft PowerPoint presentations (.pptx files), extending the existing support for Word documents and PDFs.
Flexible Table Joins
The mask_table joins now support inner and left join type selection, user-defined alias names, and extra on conditions. Aliases allow the same table to be joined more than once and referenced cleanly.
Guaranteed Value Change for From File
The from_file mask gains a force_change option that guarantees the replacement value always differs from the original value.
New Checksum Matcher Types
The checksum matcher in the unstructured_text mask now supports the nz_ird and weighted_dual_checksum types.
AWS Resource Tagging
After a successful masking run on AWS, DataMasque automatically tags the masked RDS, Redshift, DynamoDB, or S3 resource as masked. This is enabled by default on AWS installs and requires new IAM permissions.
PRM Tagging with Your Own IaC
New guidance covers tagging AWS resources for PRM using your own CloudFormation or Terraform, for enterprises that deploy DataMasque with their own infrastructure-as-code on the snapshot-only path.
Database-Tuned Batch Sizes
DataMasque now chooses a default batch size based on the database type, using values tuned through benchmarking for each supported database.
Library Rename Propagation
Renaming a ruleset library now offers to update the rulesets that import it, so they remain valid after the rename.
Stricter Ruleset Validation
Ruleset validation now rejects two previously ignored, undocumented options: metadata_logging on the imitate_uuid mask, and the mask-level context_filter on the unstructured_text mask. Rulesets that set either option must remove it on upgrade. The documented per-matcher context_filters option is unaffected.
Reliable AI Detection in Multibyte Documents
The unstructured_text mask now reliably detects and masks personal data in large documents (over 2,500 characters) that contain multibyte characters such as Chinese, Japanese, Korean text, emoji, or accented characters. This affected Word documents, PDFs, PowerPoint files, and the mask_table task.
Per-Transform Hash Sources in XML
Fixed XML masking so each node_transform uses its own hash_sources. Previously only the first node_transform's hash_sources took effect, producing identical masked values across attributes that should have differed.
Consistent Composite Masking
Fixed composite masks (concat and chain) inside the unstructured_text mask so a value reused across components is masked consistently. Previously only the first component stayed consistent with the rest of the document, so the same last name could be masked to two different values when it appeared both on its own and inside a concatenated email address.
Editor Save Button Fix
Fixed an issue where the Save button did not re-enable after uploading a new ruleset or library file in the editor.
Additional details
Usage instructions
Please follow the steps below to complete setting up your DataMasque instance:
-
Access the application via a web browser at https://<instance-ip-or-hostname>. The application may take a few minutes to start. Please refresh the page if you encounter the "Unexpected Error" message.
-
Complete the first-time installation page by providing the following information:
-
Email address of the DataMasque admin user. This email address is stored on the DataMasque EC2 instance and is used for the purposes of providing 'Forgotten Password' account recovery and critical system notifications. DataMasque will not have access to this information.
-
Password for the admin user.
-
Hostnames or IP addresses to access the DataMasque instance.
-
The SMTP settings specific to your organisation.
-
The instance ID of your EC2 instance.
- You will be re-directed to the DataMasque login screen. Please proceed to login with the admin password you have just configured.
Note:
- This product allows masking up to a total of 500GB across unique data sources.
- When you use our software we may receive and store usage data and information relating to the performance and use of the Software. We will not disclose any system information which identifies the user or the user environment to third parties.
- To upgrade your DataMasque version, contact the DataMasque team via https://datamasque.com/contact/?source=support_ticket or support@datamasque.com to request your access to the DataMasque Customer Portal and download the new DataMasque software version.
Support
Vendor support
DataMasque provides full product and installation support within 72 hours of making an enquiry. Contact the support team at support@datamasque.com for any enquiries you may have.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.