Meet EU General Data Protection Regulation requirements with tamper-proof audit trails, data-at-rest encryption, and European-hosted deployment options.
GDPR requires complete access audit trails for personal data stores, lawful processing evidence, data minimization, and the right to demonstrate compliance on demand. Data processors must maintain records of processing activities (Article 30) and implement appropriate technical measures (Article 32).
Every query touching personal data is captured in the WAL-embedded audit stream with full statement text, user identity, timestamp, and source IP.
CYBERTEC PGEE provides Transparent Data Encryption, ensuring personal data and audit records are encrypted at rest without application changes.
Deploy on-premise or in European data centers. Audit data never leaves your jurisdiction unless you explicitly configure it to. CYBERTEC is an Austrian company operating under EU data protection law.
Parquet-based archives with configurable lifecycle policies ensure audit data is retained for the required period and can be purged when retention obligations expire.
A direct mapping of GDPR Article 32 technical security requirements to Scalefield Secure's built-in platform capabilities.
| GDPR Art. 32 Requirement | Scalefield Secure Capability |
|---|---|
| Pseudonymisation and encryption of data (Art. 32(1)(a)) | CYBERTEC PGEE Transparent Data Encryption (TDE) automatically encrypts personal data and audit archives at rest without requiring application-level changes. |
| Ongoing confidentiality, integrity, availability, and resilience (Art. 32(1)(b)) | Tamper-proof, WAL-embedded audit logs ensure data access integrity. Parquet-based centralized archiving to highly durable object storage guarantees audit resilience. |
| Restore availability and access to data (Art. 32(1)(c)) | Powered by PostgreSQL's robust streaming replication and Scalefield's high-availability deployment models to guarantee rapid restoration in the event of an incident. |
| Process for regularly testing, assessing, and evaluating (Art. 32(1)(d)) | Standardized, centralized audit streams enable automated SIEM integration and querying, making it easy to continuously assess and evaluate access control policies. |
Request a demo to see how Scalefield Secure helps you meet GDPR compliance requirements.