Vormetric Offers Security Solution for SaaS Providers

Software-as-a-service (SaaS) providers have a new way to secure data stored in their environments with a new solution from enterprise data security provider Vormetric aimed specifically at keeping SaaS data safe.

The San Jose, California-based company has released Vormetric for SaaS Providers, aimed at alleviating some of the security and compliance concerns that still hinder the adoption of SaaS by enterprise customers, the company said in a press release.

The new solution includes field, file and folder encryption as well as data security controls that companies can use to transparently shield enterprise customer data within SaaS environments from exposure to both the SaaS provider, and to any attackers that may compromise an SaaS environment, the company said.

Sixty percent of enterprises are currently storing sensitive data within SaaS environments, Vormetric found in its 2015 Insider Threat Report, and data security in these environments remains a top concern.

With Vormetric’s data security already integrated into the environments of more than 20 top SaaS providers, keeping enterprise data secure from access by the SaaS provider, from other SaaS customers, or from compromises of the SaaS provider’s infrastructure is a top priority for the company. Meeting compliance requirements also is key to keeping SaaS solutions safe and to promoting even broader adoption of SaaS, Vormetric said.

“Enterprise security concerns about SaaS data-at-rest security, risk reduction, privacy and compliance have always inhibited enterprise SaaS adoption,” said Vormetric’s Vice President of Cloud C.J. Radford. “SaaS providers who visibly embrace Vormetric to lock down their customer’s information immediately reap the benefits of increased customer trust and confidence, while also differentiating their brand, reducing liability and unlocking new revenue opportunities.”

Specifically, Vormetric for SaaS Providers safeguards sensitive information from data breaches and other loss or theft by providing encryption and access controls for SaaS data, while keeping encryption keys and access policy management separate from SaaS infrastructure, the company said.

The solution also meets compliance requirements including encryption, access controls and audit information for regulated data at both the file and folder level, and within SaaS applications, according to Vormetric.

Vormetric is offering the new solution in two trust models—one that encrypts in the cloud with keys at the SaaS provider, and the other that encrypts in the cloud with keys in the enterprises.

In the former, SaaS providers encrypt data for customers, with access policies and encryption keys managed from within the SaaS infrastructure by either the SaaS provider or the enterprise customer. In the latter, enterprises hold and manage their own encryption keys and access policies, with the SaaS infrastructure using these keys and policies to encrypt data used within the SaaS application.