Database Encrypted due to GDPR - on the fly decryption

[veebuv]

Hi everyone!

Our DB is encrypted at rest where all the fields basically are hashed.

We currently use a aes-256-cbc encryption algo to encrypt and decrypt our data on the fly whenever we ready information from our server

Is there any ability for us to do something similar here ? It would be huge if we could do this

[flamber]

Hi @veebuv
I’m not sure I understand. Metabase runs queries on your database, so it just needs the connection details.
You should encrypt the connection details:
https://www.metabase.com/docs/latest/operations-guide/encrypting-database-details-at-rest.html
And you probably want to disable any type of scanning:
https://www.metabase.com/docs/latest/administration-guide/01-managing-databases.html#database-sync-and-analysis

[HubertdR]

Hello

We are also encrypting data in our MySQL DB. Can Metabase read the data and decrypt at each user connection?

The goal is to have our data encrypted in mySQL but clearly visible in MB

Thanks

[dwhitemv]

@HubertdR

Please necro only one thread at a time … I responded in your other one already.

Automatically Decrypt a column in Postgres on syncing with Database

Hi! Is there a way were I could automatically decrypt encrypted columns to allow a user to run a SQL Question over that column? As of now we are manually adding the Decryption Keys on every query that will use data inside the encrypted column. This has been great to some extent but, would we would like to know if we could automatically do decryption of the column while the syncing with database is happening Thanks!