How do I store the sensitive information on SQL server?. We have policy guidelines,
DBA and Development engineers are not allowed to view the data as plain text.
I am aware of the
encryption technologies and
data masking technologies but the problems is, except the person who is directly responsible for the data, no one else can access the data as per the policy.
When developers need to perform some calculation on sensitive information, how is it possible to do that, without decrypting? while still allowing SysAdmin users to view the encryption key details? I am sure, I am not the first one to implement this system. How do I design this solution? Thank you!
Is it possible to create a reference column based on the original column and give it to developer for calculations? In that case, how to avoid direct logics or how to avoid people reverse engineer the logic and how is it possible to keep the encryption / hashing logic away from DBA.
I am open to any other suggestion or workarounds. Thank you!