MongoDB’s field-level encryption protects private data—even from DBAs

Enlarge / Encrypted coffee is likely poisonous and should never be consumed raw. Decrypt and validate responsibly before human consumption. (credit: Brett Hoerner / Flickr)

In December 2019, popular document database MongoDB added a fairly radical new feature to the platform: field-level database encryption. At first glance, one might wonder whether this is a meaningful feature in a world that already has at-rest storage encryption and in-flight transport encryption-but after a little closer analysis, the answer is a resounding yes.

One of MongoDB's first customers to use the new technology is Apervita, a vendor that handles confidential data for well over 2,000 hospitals and nearly 2 million individual patients. Apervita worked side by side with MongoDB during development and refinement of the technology.

Since reaching general availability in December, the technology has also been adopted by several government agencies and Fortune 50 companies, including some of the largest pharmacies and insurance providers.

Read 22 remaining paragraphs | Comments