SQL Encrypt

Encryption Management

Automated enforcement, management, and verification of encryption at rest. Key rotation, vault integration, TDE, and Always Encrypted with zero human interaction.

Key Vault Integration

☁️

Azure Key Vault

Native integration with Azure managed keys

🔐

AWS KMS

Full AWS Key Management Service support

🗝️

HashiCorp Vault

Enterprise secrets management

Managed Encryption Types

TDE (Transparent Data Encryption)

Full database encryption at rest
Automatic key rotation scheduling
Zero-downtime key changes
Backup encryption verification

Always Encrypted (Column-Level)

Per-column encryption control
Deterministic & randomized options
Column Master Key management
PII column recommendations

Automatic Key Rotation

╔══════════════════════════════════════════════════════════════════╗
║                    KEY ROTATION IN PROGRESS                       ║
╠══════════════════════════════════════════════════════════════════╣
║ Rotation Type: TDE Protector Key                                  ║
║ Database: ProductionDB                                            ║
║ Started: 2024-01-21 02:00:00                                      ║
╠══════════════════════════════════════════════════════════════════╣
║ PROGRESS                                                          ║
║ ─────────────────────────────────────────────────────────────── ║
║ ✓ Step 1/5: Create new key in Azure Key Vault                    ║
║ ✓ Step 2/5: Set new TDE protector                                 ║
║ ► Step 3/5: Re-encrypt database encryption key                    ║
║   [████████████████░░░░░░░░░░░░░] 62%                             ║
║ ○ Step 4/5: Verify encryption                                     ║
║ ○ Step 5/5: Archive old key                                       ║
╠══════════════════════════════════════════════════════════════════╣
║ Estimated completion: 02:45:00                                    ║
║ Zero downtime: ✓ Database remains online                          ║
╚══════════════════════════════════════════════════════════════════╝

Encryption Status Dashboard

╔══════════════════════════════════════════════════════════════════╗
║                    TDE ENCRYPTION STATUS                          ║
╠══════════════════════════════════════════════════════════════════╣
║ DATABASE            │ STATUS      │ KEY SOURCE  │ ROTATION DUE   ║
║ ───────────────────┼─────────────┼─────────────┼─────────────── ║
║ ProductionDB        │ ✓ Encrypted │ Azure KV    │ 2024-04-15     ║
║ StagingDB           │ ✓ Encrypted │ Azure KV    │ 2024-04-15     ║
║ DevelopmentDB       │ ⚠ Not Set   │ -           │ -              ║
║ ArchiveDB           │ ✓ Encrypted │ Azure KV    │ 2024-05-01     ║
╠══════════════════════════════════════════════════════════════════╣
║ COLUMN ENCRYPTION STATUS                                          ║
║ ──────────────────┼──────────────────┼──────────────┼────────── ║
║ Customers          │ SSN              │ Deterministic│ ✓ Active  ║
║ Customers          │ CreditCardNumber │ Randomized   │ ✓ Active  ║
║ Employees          │ Salary           │ Randomized   │ ✓ Active  ║
║ Patients           │ MedicalRecord    │ -            │ ⚠ Not Set ║
╠══════════════════════════════════════════════════════════════════╣
║ RECOMMENDATIONS                                                   ║
║ ⚠ DevelopmentDB not encrypted - Enable TDE?                      ║
║ ⚠ Patients.MedicalRecord contains PHI - Enable encryption?       ║
╚══════════════════════════════════════════════════════════════════╝

Simple Configuration

# sql2ai-encrypt.yaml
key_vault:
  provider: azure
  config:
    vault_url: https://mycompany-keys.vault.azure.net/

rotation:
  schedule:
    tde_keys:
      interval: 90d
      window: "Sunday 02:00-06:00"
      notification: 7d_before

    column_master_keys:
      interval: 365d
      notification: 30d_before

always_encrypted:
  columns:
    - table: Customers
      column: SSN
      encryption_type: deterministic

    - table: Customers
      column: CreditCardNumber
      encryption_type: randomized

Automate Your Encryption

Key rotation, vault integration, and compliance verification with zero manual intervention.

Start Free Trial View All Features

No credit card required • Free for individual developers