Articles
Passing a data protection audit with a stateless API
Audits fail on the copies you forgot, not the database you secured. What auditors ask, the evidence to prepare, and how a stateless boundary shrinks scope.
Deterministic anonymization: join keys without storing PII
Same input plus the same salt yields the same token on every call — stable join keys for logs and analytics, no token vault, nothing stored.
Why stateless anonymization reduces exposure
A redaction service that keeps your data becomes a new data store you govern. Stateless anonymization shrinks the trust boundary to a single request.
Mask vs redact vs replace vs hash vs substitute
Mask, redact, replace, hash, and substitute are five PII anonymization strategies. Here's how they differ and when to use each with the Veramask API.
The Hidden Cost of Logging PII
Logging PII is cheap to write and expensive to forget. The compliance risk, breach multiplier effect, and engineering toil — and how to make logs safe by default.
Welcome to the Veramask Blog
Engineering guides, privacy deep-dives, and product updates from the Veramask team.