Vormetric Data Security Products

Efficiently De-Identify Sensitive Data and Reduce PCI DSS Scope

For today’s IT teams, the time and effort it takes to comply with corporate security policies and compliance mandates like the Payment Card Industry Data Security Standard (PCI DSS) continues to increase—but budgets, resources, and staffing do not. For the last decade, data tokenization offered the potential to help security teams more efficiently address a wide range of security and compliance objectives. However, traditional tokenization tools have introduced a lot of costs and complexity, which prohibited organizations from fully capitalizing on these advantages.

Vormetric offers a better way. Vormetric Vaultless Tokenization with Dynamic Data Masking helps your organization to address its security and compliance objectives, and do so with minimal disruption and administrative overhead. With the solution, you can tokenize primary account numbers and remove them from cardholder data environments and from PCI DSS audit scope. In addition, you can protect personally identifiable information (PII). Plus, by offering persistent security controls, high performance, and predictable per-server pricing, Vormetric Vaultless Tokenization enables your organization to expand its use of tokenization, including in large-scale cloud and big data environments.

Vormetric Vaultless Tokenization makes it easy to use format-preserving tokenization to protect sensitive fields in databases. Vormetric Vaultless Tokenization supports both Random-token and Crypto-token generation. The solution offers a virtual appliance that tokenizes records and manages policies for accessing tokens and clear-text data and uses REST APIs for tokenization requests.

Vormetric Vaultless Tokenization makes it fast and easy to add policy-based dynamic data masking to applications. In addition, by leveraging the latest standards-based format preserving encryption (FPE) and random tokenization techniques, the Vormetric solution eliminates the need for a token vault and an associated database. As a result, the solution reduces cost and complexity, enhances performance, and makes it easier to achieve global scale and high availability.

Vormetric Vaultless Tokenization can tokenize and dynamically mask 
sensitive data according to defined policies.

Key Features

  • Streamlined application integration. The Vormetric Vaultless Tokenization solution employs RESTful APIs to enable developers to add tokenization and dynamic masking operations to applications. This approach streamlines all the application development efforts associated with implementing tokenization and protects the data at its creation.
  • Dynamic data masking. Administrators can establish policies to return an entire field tokenized or dynamically mask parts of a field. For example, a security team could establish policies so that a user with customer service representative credentials would only receive a credit card number with the last four digits visible, while a customer service supervisor could access the full credit card number in the clear.
  • On-demand scalability. The Vormetric token server runs as a virtual appliance, and server instances can be added and removed to accommodate changing performance requirements.
  • Efficient vaultless implementation. The solution features a vaultless approach, which means your teams don’t have to deploy, administer, and synchronize databases that vault tokens. As a result, the solution enables higher performance, easier deployments, and more efficient scalability across global environments.
  • Random Tokenization. An option for the token generation to be independent and not cryptographically derived from the input.
  • Supports Dates. The solution allows users to tokenize dates. The tokenized dates will still be in a format recognized by the application.
  • Stateless. The solution does not store any state, PCI or PII information.
  • Batch Data Transformation support. Vormetric Batch Data Transformation is a product that provides capabilities to mask, tokenize or encrypt sensitive column information in databases. It is used to quickly tokenize data in existing databases that will be in use with applications that are protecting sensitive data with Vormetric Tokenization.

Vormetric Vaultless Tokenization is part of the Vormetric Data Security Platform, which means you can leverage a single platform for tokenization, encryption, key management, and privileged user access control. As a result, you can employ the mix of technologies that’s optimally suited to your specific projects and use cases, while gaining the cost savings and operational benefits of working with solutions that can be uniformly managed. With Vormetric Vaultless Tokenization, you can work with one platform and one vendor, and avoid unpredictable costs and complex support models.


Demo: Vormetric Tokenization with Dynamic Data Masking

In four minutes learn about the Vormetric Data Security Platform and how Vormetric Tokenization protects your sensitive data...

Watch Now >>


Vormetric Digital Digest On Data Security

Data Security in the Cloud

In today’s competitive environment, enterprises earn their customers’ trust every day.

Download >>


 Technologies like tokenization reduce compliance scope by replacing sensitive data with a non-sensitive token that looks and acts like the original. This means you get data protection without the need to change your databases. Once sensitive data is replaced with the token, these systems are no longer subject to compliance, meaning a lot less work for IT and compliance teams. 

Adrian Lane,
Analyst and CTO,


Encryption Architecture

Vormertic Data Security for PCI DSS 3.0 Compliance

Download >>
Encryption Architecture

Vormetric Tokenization with Dynamic Data Masking

Download >>


Vormetric Data Security Platform Data Sheet

Vormetric Data Security Platform

Download >>


Vormetric Data Security Platform Data Sheet

Vormetric Tokenization with Dynamic Data Masking

Download >>
Fortrex: Evaluation of the Vormetric Token Server

Fortrex: Evaluation of the Vormetric Token Server

Download >>
How Format-Preserving Encryption Tokenization Addresses PCI DSS 3.x Security Requirements, by Fortrex

How Format-Preserving Encryption Tokenization Addresses PCI DSS

Download >>

The Vormetric Digital Digest on Data Security

Customer and Partner Success

  • Rackspace Cloud Partners
  • McKesson
  • AWS
  • Google Compute Engine
  • Microsoft
  • IBM
  • CenturyLink
  • QTS
  • Teleperformance Secures
  • Delta Dental