Piiano Vault

Name: Piiano Vault
Rating: 5.0 (7 reviews)

Secure cloud storage for PII,PHI,PCI,KYC with simple APIs

5.0•7 reviews•

496 followers

Secure cloud storage for PII,PHI,PCI,KYC with simple APIs

5.0•7 reviews•

496 followers

Visit website

Compliance software

•

Security software

Piiano is a developer-friendly privacy vault for storing and securing customer data. We simplify the engineering of privacy with APIs, providing encryption, data retention, key rotation, and more. Covering you for privacy regulations and data security needs.

Free Options

Launch tags:API•Software Engineering•Developer Tools

Launch Team

CloudflareYour next app belongs on Cloudflare Workers. Deploy for free

Promoted

Piiano Vault

Maker

📌

Two years ago, Piiano was born out of a burning desire to solve a problem that we had been wanting to address for many years. The timing was right, surprisingly, when GDPR was enforced. The world has changed overnight. Having data breaches isn’t cool anymore. The amount of data is rising. System complexity makes it harder to secure everything. Threats are becoming more innovative too. And protecting your customers data is a must even more so. However, we found that the market lacked the necessary infrastructure for developers to easily engineer systems that could effectively secure data. Together with my amazing team we introduce to you Piiano Vault. Piiano Vault 🛡️ - saves you a huge amount of time to build all the features you would need to both secure the data and comply with the privacy regulations. Piiano focuses on developers and sensitive data. Piiano Vault simplifies the implementation of this thing that so many companies waste their time building it again and again. We set out to start with simple RESTful APIs. Now supporting seamless ORM integrations for Python, Java and typescript. So data protection at the app level is so easy and transparent. We have lots of documentation, guides, code examples and sample apps in our github page and a sandbox docker to play locally with our product on your machine. With Piiano you can concentrate on working on your data and not managing encryption keys and building encryption over your SQL databases, we cover you for security and privacy. ❤️I'd like to thank Ben Lang and the rest of the community for helping us here today. Thank you everybody! —--------------------------------- Here’s the rest of the story if you’re really curious about it. Everybody tried to solve data breaches and data exhilaration before. The older remember that for 20 years now the info-security (now cybersecurity) industry has been kicking. And when we started Piiano we thought it’s time for privacy engineering. But boy were we wrong. Hardly, they have security engineering, so now privacy engineering is too much future. Our approach was different, we figured out that we have to focus on PII (hence our company’s name Piiano) and sensitive data. Basically, if a dataset is de-identified and getting stolen, the privacy impact for the data subject is really lowered. Up to the extent you don’t have to report a data breach at all. The problem with data, and we didn’t know it in our previous jobs, is that you have so much of it. So many duplications and copies and it’s out of your control. As a security manager - you hardly know what the developers do in the code after a while, and how will you know what data is collected and where it’s stored. It’s not cool to “collect everything” anymore, not the best practice. We were also deeply frustrated as both hackers and software engineers to talk with a couple of hundreds CISOs and learn that PII isn’t on their priority list. Nor their understanding of why encryption at rest is the biggest fallacy of the cloud era - hint, nobody steals your hard drive from Amazon’s data center. Neither the fact that even stupid SQL injections are still out there and other security bugs in the code - forgetting authorization checks and other attacks. We want to stop all that. We are two founders, we met 20 years ago in the army. But we have been working together for 13 years now. Previously we had a small firm that people called us the Task Force for special software engineering and cyber projects. We did lots of hardcore R&D projects and eventually got acquired by Magic Leap (yes, this AR company with the jumping whale video, from Florida). I became the head of product security, basically everything security that isn’t IT. At the peak I led 700 engineers to build a secure OS, cloud services and even hardware. It was a dream coming true for OS and system-internals geeks like myself. All along the time I worked in the industry I released many 0d’s for Microsoft Windows and other products. And got crazy bounty awards too, I once even got a whatsapp account takeover back in 2012. And for 17 years now I’ve been working and maintaining diStorm - the first disassembler open source library for x64, at the time. Securing systems on one hand, and hacking systems on the other hand, I came to realize enterprise security is so hard. Unfortunately the threading model is not if you get attacked, but when. And we are here to help developers build secure systems to protect their data. And a good security plan starts with the developers with both security and privacy by design. Not to mention that in my previous role I didn’t know how to ask the hard questions about data, because GDPR was so new. But today everybody should know where they store the data, how they encrypt it, when they delete it, who accesses it and why, when they should tokenize the sensitive data, etc. Everything is about how you safely store the data and how you use it. Security can be fun too :)

Report

3yr ago

50+ Contract Templates by Clientjoy

@gil_dabah Congratulations on the launch of Piiano Vault 🎉! Your team's innovative approach to privacy engineering is a game changer for developers and data security. Thank you for simplifying data protection and compliance with privacy regulations 🛡️🔒.

Report

3yr ago

@gil_dabah Best of luck on this crucial endeavor, your hard work and dedication will pay off for sure.

Report

3yr ago

Piiano Vault

Maker

@naftali_opatowsky Long time, thanks my friend!

Report

3yr ago

@gil_dabah excellent write-up of your journey and the important problem Piiano set out to solve. With your immense experience, Piiano will knock it out of the park!

Report

3yr ago

Piiano Vault

Maker

@tomteman Thanks Tom! xoxo

Report

3yr ago

What security measures are in place to prevent unauthorized access to sensitive data stored in the Vault?

Report

3yr ago

Piiano Vault

Maker

@yaron_budowski Vault has a robust Identity and Access Management (IAM) system that comes with secure default settings. This allows you to easily customize user access and restrict permissions to match your specific requirements.

Report

3yr ago

Piiano Vault

Maker

@yaron_budowski @nhaas In addition, all data is encrypted at the field level, so direct access to the back store DB doesn't reveal any of the data. And then, we have granular access policies for the runtime access to the data that allows to mask the data, which means that even if you fully compromise the web server - you cannot read everything from the vault, unlike a SQL DB, where you can still select *... And our coolest feature is JWT verification inside Vault, so it actually checks the ownership of an object before it allows access to it - think object level security. This truly allows zero trust architecture between the webapp and the vault, and a full remote code execution won't let you forge JWT tokens of arbitrary users (because it's normally done in another service) and thus the data is more secure in this situation too and lets you return full plaintext values to the end user (as opposed to the masking technique).

Report

3yr ago

Enna Health 1.0: Chemo Symptom Tracker

Is this an alternative to TrueVault API? We're using them currently but pricing has been super high for us as we're still bootstrapping and pre-revenue. I'd love to reach out to you and learn more

Report

3yr ago

Piiano Vault

Maker

@abdlh Definitely. Please book a demo with us. Let’s talk 🔥

Report

3yr ago

Piiano Vault

Maker

@abdlh here's the link to talk to us - https://calendly.com/piiano-foun...

Report

3yr ago

Enna Health 1.0: Chemo Symptom Tracker

Lovely, thanks @shiftan & @gil_dabah Just booked something, excited to learn more!

Report

3yr ago

When are great team comes together, love it! One question I had in mind is how is that data encrypted and tokenized within the Vault?

Report

3yr ago

Piiano Vault

Maker

@asaf_fybish2 thank you so much! Vault is a cloud native solution deployed within your own architecture, we use your own KMS and DBs to encrypt and store the data. Data is stored encrypted with DEK (data encryption keys) in the DB. DEKs are encrypted using KEK (key encryption key) from KMS, and are stored in the DB as well. We use symmetric encryption, AEAD (Authenticated Encryption with Associated Data) AES-256-GCM.

Report

3yr ago

KloudMate

So good to see a meaningful, data protection focussed product for developers, amid a surge of GPT+AI driven apps. Congratulations on the launch and good luck!

Report

3yr ago

Piiano Vault

Maker

@pranabgohain Haha, definitely, thank you my friend!

Report

3yr ago

Piiano Vault

Maker

BTW @pranabgohain just took a look at kloudmate, ping us when you launch, we're curious to see what you have in store 👀

Report

3yr ago

Sealit

Sounds really interesting. 3 quick questions. 1. who hosts the data? 2. where is the data hosted? 3. who has access to the encryption keys at any given time?

Report

3yr ago

Piiano Vault

Maker

@lazar_radenovic The solution is self hosted, i.e. runs at your cloud environment. Therefore, you host the data and only you have access to it. The encryption keys are generated in your KMS. To ease the deployment, the entire solution is inside a single container and we have multiple integration for your cloud environment, such as solutions running as container in K8S with its helm installation, AWS - AppRunner, GCP - CloudRun, or even just as a container anywhere.

Report

3yr ago

Sealit

@david_erel awesome - thank you!

Report

3yr ago

Calendar.com Scheduling Chrome Extension

Can you tell me about extra security layers? We store a lot of data. Developer side seems pretty easy to integrate.

Report

3yr ago

Piiano Vault

Maker

@johnrampton There are many security layers: 1. KEK (key encryption key) stored in KMS 2. The database is stored with encryption at rest by the cloud provider (e.g. AWS) and in addition 3. All data inside the DB is encrypted by the application in case of a malicious actor being able to access the database directly. 4. All transport is over course TLS 5. IAM and its policies allow you to lock down access to the least privileges principle. You can mask fields, and provide granular access (read only, write only, search only) on a per field basis in a very simple infrastructure as code file. For example, you can expose only a masked SSN to a web application that only requires it and even if the web application is compromised, the attacker won't be able to acquire a full SSN because the application API Key is not authorized for anything else.

Report

3yr ago

1 2 3

•••

5.0

Based on 7 reviews

Review Piiano Vault?

Piiano Vault is highly praised for its user-friendly platform and robust privacy features, making it a top choice for developers and businesses handling sensitive data. Users appreciate its simple API integration, which saves time and effort in securing customer data. The platform's encryption, data retention, and key rotation capabilities ensure compliance with privacy regulations. The support team is noted for being responsive and helpful. Overall, Piiano Vault is recommended for its ease of use, reliability, and the strong backing of a knowledgeable team.

Summarized with AI

Pros

Cons

Reviews

All Reviews

Most Informative

Piiano Vault

Secure cloud storage for PII,PHI,PCI,KYC with simple APIs

Secure cloud storage for PII,PHI,PCI,KYC with simple APIs

What's great

What's great

What's great

What's great

What's great

What's great