Selected Questions and Answers
Important note: The FAQs below are not a comprehensive resource, and only address a fraction of the available capabilities in IRI software or questions people ask.
Please visit the IRI solutions and products sections to learn more. Also, do not hesitate to contact us if you have any questions, or need details on specific features or options applicable to your use case(s).
How should I price out a FieldShield installation for static (or dynamic) data masking?
The price of IRI FieldShield is based only on the number of hostnames where static data masking jobs run; i.e., wherever the executable/engine is installed. The price does not vary by the number of cores, users, data sources, rows, functions, features, etc. The same considerations below apply to IRI Voracity (data management platform) licenses which include FieldShield, CellShield EE, and DarkShield.
Base FieldShield one-time license fees cover perpetual use, documentation, and the first year of technical support in standard use cases. There are discounts on multiple and runtime (see below) licenses, and FieldShield is also available by subscription in Voracity (see below).
At least one FieldShield license is required at each site. Most sites procure more than one masking engine (hostname license) at the same time, receiving a 40% discount on those additional licenses in the process. The number of licenses they take factors in both performance and convenience considerations.
In performance terms, the number of licenses may match the number of (major) database servers in use ... particularly where tables volumes are large. While it is not a one-for-one requirement, masking jobs run faster if the masking engines are installed/licensed on each large DB source or target system (to avoid both network and I/O contention). The best way to know your tolerable degradation point on a given install is through testing.
In convenience terms, it's very common to also license the engine for local use on one or more IRI Workbench client dev/test PCs, where masking jobs are first designed and debugged, as well as on disaster recovery/failover systems. Regardless of the number of licenses however, IRI Workbench is always free to distribute.
Again, additional perpetual use FieldShield licenses procured simultaneously (along with the first one at full price) are discounted 40%. Annual maintenance renewals are offered at 20% of the paid-up license fee(s), and include upgrades and limited license transfer and disaster recovery rights.
Alternatively, five FieldShield hostname licenses and support for them are included within the base tier, annual IRI Voracity subscription. Voracity also provides for DB subsetting, IRI RowGen for test data synthesis, CoSort-powered data integration and migration, data quality, analytics, and much more.
For dynamic data masking applications through the FieldShield 'Sandkey' API library (SDK) -- or for runtime decryption sites using the static FieldShield engine without IRI Workbench, documentation, or support -- there is more deeply discounted, volume-tiered, pricing. That is offered in a royalty covenant attached to a primary static data masking development license (which covers IRI support and the other features above). Dynamic data masking performed on the same systems/s) (hostname/s) on which the static data masking license is already installed does not require additional licensing, however.
IRI is also working in 2020 to provide a proxy-based dynamic data masking system for relational database applications that use a special JDBC driver. As this is partner technology, pricing is different, but discounted with the rest of FieldShield for data classification, search, and static data masking.