Data Access Security

Ensure privacy and protection of data with real time segregation and dynamic data masking

NextLabs Data Access Enforcer (DAE) allows companies to dynamically enforce policies independent of application, UI, API, Microservice, batch job, and application function; regardless of how the data is being accessed.

Why Data Access Enforcer?

Data Access Enforcer Products

DAE for SAP ERP

NextLabs Data Access Enforcer for SAP ERP (DAE for SAP) provides dynamic data-level security controls and fine-grained data access governance for SAP applications. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for SAP. DAE for SAP enforces data-level security controls – such as field-level dynamic data masking, record-level data filtering, and monitors data access activity directly from within the data access layer of the SAP S/4 HANA and SAP ECC.

DAE for SAP complements SAP Dynamic Authorization Management (SAP DAM), which operates at the application layers of the SAP S/4 HANA and SAP ECC. DAE is UI, API, microservice, batch job, report, Transaction, and Fiori app independent and will support any UI with a single set of policies within a single solution.

DAE for SAP prevents unauthorized access to sensitive SAP data through fine-grained data-level security controls, protecting data, and addressing compliance requirements at the same time. DAE for SAP enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for SAP HANA

NextLabs Data Access Enforcer for SAP HANA (DAE for SAP HANA) provides dynamic data-level security controls and fine-grained data access governance for SAP HANA, whether it is being accessed through an SAP application or directly. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for SAP HANA. DAE for SAP HANA enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for SAP HANA prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for SAP HANA enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for SAP HANA leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Linux

NextLabs Data Access Enforcer for Linux (DAE for Linux) provides dynamic data-level security controls and fine-grained data access governance for Linux applications that use ODBC/JDBC. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for ODBC and JDBC applications on Linux. DAE for Linux enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for Linux prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Linux enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Linux leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Windows

NextLabs Data Access Enforcer for Windows (DAE for Windows) provides dynamic data-level security controls and fine-grained data access governance for Windows Desktop and Server applications that access external databases such as Excel, SQL Developer, DBeaver, Tableau, Power BI, SQL Server Management Studio, and SQL*Plus. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for Windows applications. DAE for Windows enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

As an inline integration with ODBC, .NET, and SQL*Net, DAE for Windows prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Windows enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Windows leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Oracle

NextLabs Data Access Enforcer for Oracle (DAE for Oracle) provides dynamic data-level security controls and fine-grained data access governance for Oracle by serving as a SQL*Net proxy, allowing all calls from an Oracle Client to an Oracle Database to be evaluated against DAE’s data access policies. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for Oracle. DAE for Oracle enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer where SQL*Net operates.

DAE for Oracle prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Oracle enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Oracle leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for PostgreSQL

NextLabs Data Access Enforcer for PostgreSQL (DAE for PostgreSQL) provides dynamic data-level security controls and fine-grained data access governance for PostgreSQL by serving as a database proxy, allowing all calls from an ODBC/JDBC Client to a PostgreSQL Database to be evaluated against DAE’s data access policies. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for PostgreSQL. DAE for PostgreSQL enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for PostgreSQL prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for PostgreSQL enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for PostgreSQL leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Microsoft and Azure SQL

NextLabs Data Access Enforcer for Microsoft and Azure SQL (DAE for Microsoft and Azure SQL) provides dynamic data-level security controls and fine-grained data access governance for both Microsoft SQL and Azure SQL. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for both Microsoft SQL and Azure SQL. DAE for Microsoft and Azure SQL enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for Microsoft and Azure SQL prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Microsoft and Azure SQL enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for Microsoft and Azure SQL leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for BigQuery

NextLabs Data Access Enforcer for BigQuery (DAE for BigQuery) provides dynamic data-level security controls and fine-grained data access governance for BigQuery. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for BigQuery. DAE for BigQuery enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for BigQuery prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for BigQuery enables employees and external partners to share critical information and collaborate in business processes to improve workforce productivity and business agility.

DAE for BigQuery leverages user and host attributes in making access decisions, simplifying the design and development of security features into your application.

DAE for Siemens Teamcenter

NextLabs Data Access Enforcer for Siemens Teamcenter (DAE for Siemens Teamcenter) provides dynamic data-level security controls and fine-grained data access governance for Siemens Teamcenter. Through NextLabs’ patented Dynamic Authorization platform, organizations can leverage attribute-based policy and centralized policy management to improve their security and compliance posture for Teamcenter, with policies based on the identity of the Teamcenter user. DAE for Siemens Teamcenter enforces data-level security controls – such as field-level dynamic data masking and record level data segregation and monitors data access activity directly from within the data access layer.

DAE for Siemens Teamcenter prevents unauthorized access to sensitive data through fine-grained data-level security controls, protecting data and addressing compliance requirements at the same time. DAE for Siemens Teamcenter supports both Oracle and SQL Server databases out of the box, so no custom code is required regardless of whether a Teamcenter deployment is using Oracle or SQL Server as its database.

DAE and Dynamic Data Masking

Dynamic Data Masking refers to masking of data where the decision on whether to mask the data in question is determined at the time of the data access request and is based on attribute values of the user requesting access, the data itself, and the environment or context in which the request is being made. Other terms that are often used to refer to data masking include anonymization, obfuscation, and tokenization, although these terms are sometimes defined slightly differently depending on context.

Data Access Enforcer (DAE)

FEATURES
Dynamic Data Filtering controls
  • Segregates and shields data from unauthorized users until access is granted. Authorization can be determined based on policies that examine attributes of the data being accessed, the context of the request, and user identity.
  • Control what users can do with filtered rows in database tables
  • Filter the database rows by operation (e.g., Select, Update, Delete) such that users cannot select, update, or delete rows that have been filtered
Database operation and data manipulation controls
  • Control what database operations user is authorized to perform
  • Uses attribute-based policies to control Create, Read, Update and Delete (CRUD) operations
  • Block by operation (e.g., Insert, Execute) such that users cannot insert a base table or call a stored procedure
Dynamic Data Masking Controls
  • Ensures that users can only view the fields on the record to which they have been granted access. For those not granted access, the value of the fields will be masked
  • Block user to update the masked fields
Support for multiple database APIs Access via OBDC, JDBC, or REST APIs
Support for multiple data sources Ability to enforce policies with user attributes that can come from Active Directory or the database itself
Centralized auditing and reporting  Auditing and reporting in Control Center on all the database request and actions  performed

 

BENEFITS
Protect data and simplified access control Ensure privacy and protect data with dynamic data segregation and masking controls

Externalize authorization management to simplify and reduce the time spent on administering access control policies

Enhanced business agility React more rapidly to changes in business requirements, market conditions, or regulatory environment since policy changes can be made without requiring code changes or application downtime
Higher ROI by leveraging existing IT investments Lower your total cost of ownership as you can leverage your existing investment in the NextLabs platform
Reduced compliance costs Reduce the cost of compliance through more efficient and cost-effective monitoring and audit of your data