OpenText Voltage SecureData Appliance Certified

OpenText SecureData’s Format-Preserving Encryption (FPE) secures sensitive info while maintaining its original length, format, and character set. Standard encryption creates binary blobs that break application logic and require massive database schema redesigns. FPE ensures a protected value, like a 16-digit credit card or 9-digit SSN, retains its structure, enabling "zero-friction integration". Protected data stays in existing fields and flows through legacy systems without costly architectural modifications.

FPE supports broad data types including dates, numbers, and variable-length strings with Unicode support for global character sets. For long-term security, it uses NIST-accepted FPE with 256-bit keys, a quantum-safe algorithm providing resistance against future quantum cryptanalysis. This ensures data protected today remains secure without disruptive re-protection as quantum computing matures

OpenText SecureData uses a stateless architecture that removes the need for high-maintenance key databases found in traditional solutions. Instead of storing millions of static keys, the platform uses a Key Derivation Function (KDF) to generate keys on-the-fly. Keys are derived deterministically by combining Master Secrets with a specific Identity, producing the same key every time without storing it on disk. This enables virtually unlimited scalability, supporting hyper-scale environments processing billions of transactions daily without the latency common in database-driven vaulting . In OpenShift, this ensures the Key Servers remain lightweight and agile. Master Secrets can be anchored in customer-owned HSMs or cloud vaults, ensuring keys cannot be derived without a live connection to the root of trust. This model simplifies disaster recovery and ensures long-term data sovereignty across hybrid and multi-cloud environment