I have requirement to store the some sensitive information in SQL Server 2016. Organization policy demands, it should be encrypted.
Business Requirement:
- Data cannot be decrypted by DBA.
- Data cannot be decrypted by Developers.
- Only end users able to access the decrypted data.
I have looked into some of the encryption options:
- Column Level Encryption
- Always Encrypted
But both of these options, does not satisfy the requirements. In Column Level Encryption
, data can be accessed by DBA and Developers.
Always Encrypted
does not allow DBAs to decrypt data but still Developers can be able to view the decrypted data, since data decrypted at the client driver
.
I am thinking there must be some other method or combination of techniques can be used to achieve this requirements.
Please suggest on this. Thank you!