Why CloudMask? Cross-Organizational Boundaries Avoid limiting yourself to specific Cloud vendors. CloudMask protects your data across organizational and application boundaries. You can leverage the full potential of Cloud ecosystem with its many providers, software developers and ongoing innovations. Develop With Your Preferred Cloud Build hybrid applications using the Cloud platform that best fits your needs. Your data remains protected as it is processed on the Cloud and is only decrypted once it reaches your trusted on-premise server. Mitigate Insider Threat Strengthen your on-premise security by ensuring that administrators, root users and other insiders do not have implicit data access. Data remains protected in-use while being processed in server memory. Even CloudMask system administrator can only access the data if they possess keys that have been explicitly authorized. Comply With Privacy Regulations Apply Privacy By Design and Privacy By Default throughout your on-premise and cloud environments. Use fine-grained policies to centrally manage access based on user, application context, and fields in question. Grant access when a valid reason exists and for only as long as required. When regulations change, propagate the change with a single click. Features: Distributed Workload All cryptographic operations are done on end-point devices. As more users are activated, CloudMask leverages their devices' processing power. There are no encryption servers or gateways that can introduce a bottleneck Evolving Encryption As guidelines evolve, data needs to be re-encrypted using stronger algorithms. CloudMask lets you distribute the re-encryption workload among available trusted devices, without impacting your application. Change Management Each data element is tagged with its associated policy at the moment of its creation and throughout its lifecycle. When policies change, it is immediately applied without the need to read or write data to the applications. Auditing & Monitoring Every data and key operation is securely logged. Monitor files and fields access inside and outside your organization. Block abnormal access patterns based on parameters such as frequency, location and device. For more insight, feed the trace to your SIEM system. Benefits:

• Hold Your Own Key
• HSM & HW Tokens
• Multi-Device Trust
• Key Management
• Identity Providers
• Assurance Levels
• Temporal Access
• Organizational Keys
• Segregate Encrypted Data