Tokenization

Data Tokenization is a format-preserving, reversible data masking technique useful for de-identifying sensitive data (such as PII) at-rest. As data tokenization preserves data formats, the de-identified data can be stored as-is in data stores.

Data masking permanently alters or obscures sensitive data by replacing it with fictional but realistic-looking values. For example, a masked credit card number might look like 4567-XXXX-XXXX-1234. It keeps the format but scrambles the content. The original data cannot be recovered from masked data - it's a one-way transformation designed for non-production environments like testing, development, or analytics.

Format Preserving Encryption, or data tokenization, is an encryption algorithm, which preserves the format of the original data set, but it replaces it with tokens that have no inherent meaning or value. With Format Preserving Encryption, you can “tokenize” sensitive data, like Social Security Numbers and Credit Card numbers, to move and store it while preserving its privacy and maintaining compliance.