SAP Business ByDesign Encryption

Organizations utilizing SAP Business ByDesign® and S/4HANA® can benefit from StratoKey encryption and tokenization capabilities, to meet stringent data protection regulations. StratoKey operates in the background at the network/middleware tier without disrupting users. FIPS certified encryption and tokenization provided by StratoKey, assists organizations in meeting compliance requirements such as HIPAA, ITAR, GLBA, FERPA, GDPR, and any other data protection or data sovereignty requirements.

When StratoKey is in use with Business ByDesign or S/4HANA, sensitive data is automatically encrypted or tokenized (stored in a local database) prior to dispatch to SAP infrastructure. This has significant compliance benefits for organizations that have a regulatory requirement to prevent access to sensitive information such as PHI or CUI/CTI/CDI. Organizations hold the encryption keys locally or in the case of tokenization the actual sensitive data is stored locally and not in SAP infrastructure.