Baffle is the only security platform that cryptographically protects data as it's created, used, and shared across cloud-native data stores.

Baffle Shield for Postgres Multi-Tenant Data Security enables multi-tenant applications (such as SaaS) to use a single database for all their tenants yet logically isolate the data using encryption. Every row (record) is encrypted with a separate key.

Baffle Shield is a proxy placed in-line between your database and application. It operates on the SQL commands to encrypt and decrypt in real-time. Baffle Shield handles all the tenant-key mapping, so the application doesn't have to. This enables a no-code or low-code approach for fast and easy implementation.

Envelope encryption ensures that Baffle software never has access to your key encryption keys (KEK), enabling you to bring your own keys (BYOK) in AWS KMS.

Note! Baffle Manager is a web-based orchestration tool that configures, manages, and reports on Baffle Shields. Baffle Manager is free and also available in the AWS Marketplace.