Advanced Data Protection
Your business is nobody else's. Not even GBG.
We have spent nearly three decades pushing the boundaries of what it means to turn your data quality from good to your greatest business asset. Always with an unwavering commitment to security, reliability, simplicity and unlimited support. As organisations rely on Seltaris to process massive address datasets in record time, they also trust us with some of their most sensitive information.
We achieved this once with the launch of Kleber in the Cloud, but we weren't content to stop there. We set out to push these boundaries even further — with a goal to handle larger batch files securely with groundbreaking speed and performance.
That led us to revisit our existing security stack and integrate additional layers for higher volume workloads. An innovative cloud security architecture purpose-built to process batch data securely at the scale today's largest enterprises demand. We call it Encrypted Cloud Computing™.
Encrypted Cloud Computing™ builds on our robust, industry-leading cloud security, now taken to a whole new scale. It ensures that even the most intensive batch jobs run with airtight protections. Your data remains confidential, heavily encrypted, and not accessible to anyone.
Competing cloud environments, while convenient, pose familiar risks. Once data is inside competing cloud platforms, enforcing zero-access guarantees becomes challenging. Logging systems, privileged support consoles, and broad administrative access can inadvertently expose data or leave it vulnerable during operational troubleshooting.
That's not acceptable for your businesses highly sensitive data. With Encrypted Cloud Computing™, we've taken a ground-up approach to cloud security that mirrors — and even surpasses — the standards we've long upheld with cloud and on-premise processing.
Our most advanced cloud security architecture specifically built with enterprise in mind.
Seltaris is meticulously designed to protect your data at every step. Integrated into the core of our secure cloud environment, it utilises advanced encryption processes to handle your data without ever storing it unencrypted.
Thanks to Encrypted Cloud Computing™, we can securely process complex requests, ensuring that only you have access to your data. Your information remains encrypted during transit, throughout processing, and at rest, providing next-level security and peace of mind.
A private key is your unique security credential, issued only to you, and it's the one and only way to unlock your final result file.
When you begin a batch job, we generate a client secret key that is never shared, stored, or accessible by anyone else. From that point forward, every stage of your job relies on temporary, ephemeral keys managed through our secure identity servers. These working keys are used solely for in-memory processing and are destroyed the moment the job is complete. What remains is your encrypted result file, locked and waiting. Only your private key can decrypt it.
This design eliminates one of the biggest risks in traditional cloud environments: server-side access. On conventional servers, decrypted data can exist at rest, meaning administrators or third parties could potentially access your information.
By giving you sole control of your private key, Advanced data protection guarantees:
There are no backdoors, no hidden access points, and no way for anyone else to step between you and your data. Even under force, we cannot hand over what we cannot see.
Slide 1 of 5
Slide 1 of 8
1
Before your batch process begins, we will provide you with a unique client secret key. This key is accessible only to you, the user; no one else, not even us internally, has access to this key. It is crucial to save this key securely, as it is the only means to access your file at the end of the job.
2
Once you begin the job, your data file (source file) is encrypted and transmitted from your client PC to our secure cloud environment via HTTPS, ensuring it remains protected during transit.
3
Once the initial records of your file enter our secure cloud environment, we begin importing the stream through our encryption service. This service is designed to encrypt each record individually, line by line, as it is being uploaded.
4
After a record is encrypted, it is then transferred to our secure cloud repository. This continuous, record-by-record transfer ensures that the file is built up in the repository in real-time, without waiting for the entire upload to be completed. When the source file is fully present in our secure cloud repository, it is encrypted using an ephemeral key obtained from our identity server. This ephemeral key, along with the file, is designed to last only as long as the job.
5
When the source file is fully loaded in our secure cloud repository, it is then split into multiple mini-encrypted files. These mini-encrypted files are designed to improve load times and processing efficiency while still remaining secure.
6
At lightning speeds, each file is sent to our Altraservice. This high-performance service decrypts each mini-encrypted file and processes its contents line by line in memory. Utilizing Human Touch technology, it validates and repairs each record. Once processing is complete, the record is re-encrypted and returned to the secure cloud repository.
7
Temporary client keys are requested and managed through a secure identity server. These keys are used for decrypting and processing data segments without ever storing the decrypted data. As soon as the processing job is finished, these temporary keys are erased, ensuring that only your client key can access the final result file.
8
After processing, the encrypted segments are merged back into a result file. This result file is at rest for a limited retention window in our secure cloud environment, still encrypted, ensuring complete data security throughout the process. Only you, the client, have the key to decrypt and access the final result file during this window.
