Data Masking as a Service

 

Next Steps
Overview Auditing DPDPA CPRA DLP FERPA GDPR HIPAA PCI DSS DMaaS Static Dynamic Real-Time Test Data/TDM


Data may be the most important asset, and risk, that your company holds. It describes customers, products, transaction histories, and everything else that you run and plan in your business. This data can be in databases, files, spreadsheets, Hadoop, and cloud platforms. If you don't have the time or expertise to find and de-identify the personally identifiable information (PII) in those sources yourself, the sensitive data protection services we call IRI Data Masking as a Service (DMaaS) can help.

9

Billion

records lost or stolen

5 ½

Million

Records lost every day

64

Records

lost every Second

This since 2013, according to Breach Level Index. And, only 4% of these breaches were secure breaches where encrypted data was compromised or stolen.

IRI's professional Data Masking as a Service team can help you beat these odds. Our experts and technologies can find and protect sensitive data in most formats and silos ... on premise or in the cloud.

With the PII data protection solutions IRI offers through DMaaS, you can minimize risk and cost because you only pay for the data you need protected. We can do all, or some, of the work to classify, find, and mask that data. And we'll show your auditors the logs and masked targets that verify your data was protected and how it complies with privacy laws.

These data security compliance solutions include re-ID risk scoring for data privacy law compliance; specifically the HIPAA Expert Detemination Method security rule. See Risk Scoring Services below or this page for more information.

Relax knowing your data is secure. No specialized training or new staff is required. Just complete the form below and let's talk about how you'd like to protect your data at risk.


How IRI DMaaS Works

Step 1: We agree under NDA terms to classify, analyze, and report on the sensitive, at-risk data in these sources. We'll discuss an initial cost estimate then hone it with you during data discovery.

Step 2: Transfer the unprotected data to a secure on-premise or cloud-based staging area or provide remote, supervised access to IRI to the data sources(s) at issue. We'll use the tools in the award-winning IRI Data Protector suite to mask that data according to your business rules, on an ad hoc or recurring basis.

Step 3: Our experts can also move newly-masked data to incremental replicas in production or to lower non-production environments. From either, the data is now safe for analytic initiatives, development, testing, or training. Tell us if you need additional services, like re-ID risk scoring (expert determination) of the de-identified data.

This approach provides the benefits of proven data masking solution technology and services without the need to learn and customize new software from scratch. If you do want to use the software in-house, you will have everything pre-configured for easier long-term self-use and modification.

Please use the form below to initiate a DMaaS solution dialog with us. We would be happy to exchange information with, and provide customized service options for, your use case.


Risk Scoring Services

Uniqueness Estimates

Beyond Data Masking as a Service, IRI also offers Risk Scoring as a Service (RSaaS) and training for in-house risk scoring. Freely available is three-hour, five-part HIPAA Data SHM/EDM Compliance course covering:

  • PHI Discovery & De-Identification
  • Re-Identification Risk Scoring
  • Expert Determination
  • PHI Generalization
  • Compliance Certification, Breach Insurance, and Breach Claim Defense

Again, please use the information request form below, or write to fieldshield@iri.com, to discuss your use case and obtain a cost quote.


Test Data Services

IRI can also provide Test Data as a Service (TDaaS) by providing you with safe, referentially correct test sets for relational databases of any size, as well as custom-formatted structured and semi-structured files with test data. Just send us the DDL or layout information for the data you need, along with any complex business rules, and we will engage in a service by the hour to produce that data for your:

  • DB, Data Warehouse, and Data Vault prototypes
  • Application stress-testing and DevOps
  • Software or hardware benchmarks
  • Product demonstrations
  • Outsourced developers

Again, please use the information request form below, or write to rowgen@iri.com to discuss your use case and obtain a cost quote.

Wind Turbine

Frequently Asked Questions (FAQs)

1. What is Data Masking as a Service (DMaaS)?
Data Masking as a Service (DMaaS) is a professional service that identifies and protects sensitive data — like PII — in your structured, semi-structured, or unstructured sources without requiring you to learn or operate the masking tools yourself. IRI's DMaaS team uses proven software to find, mask, and deliver compliant datasets based on your needs.
2. How does DMaaS work?
The DMaaS process involves three main steps:
- NDA-based assessment of your data and risk,
- secure access to your data for masking with IRI tools,
- optional delivery of the masked data to production or lower environments.
All steps are handled by experienced experts to ensure security, compliance, and minimal disruption.
3. What types of data can be masked using DMaaS?
IRI DMaaS can mask sensitive data in a wide variety of sources, including databases, flat files, spreadsheets, PDFs, Word docs, images, audio files, HL7/FHIR/X12 records, and cloud-based environments. It works across formats to ensure consistent protection.
4. Can IRI DMaaS help meet compliance requirements?
Yes. DMaaS supports data masking and risk scoring functions required by data privacy laws like HIPAA, GDPR, PCI DSS, and others. IRI can also provide XML audit logs and compliance verification support for your auditors or legal team.
5. What if I want to keep my data in-house?
You can choose to provide secure, remote access to IRI or upload data to a staging area on your infrastructure. No data leaves your control unless explicitly agreed upon. DMaaS is flexible with cloud or on-premise delivery options.
6. What masking methods are used in DMaaS?
The service supports multiple data protection methods, including pseudonymization, redaction, hashing, encryption (including format-preserving), generalization, and deletion. The choice depends on your data format, business rules, and compliance goals.
7. What is re-identification risk scoring and how is it used?
Re-ID risk scoring measures how likely it is that masked data could be re-identified. IRI uses this to comply with rules like HIPAA’s Expert Determination Method. It can be provided as a service (RSaaS) or taught through IRI’s risk scoring course.
8. How much does DMaaS cost?
Pricing is flexible and based on the amount of data processed, the complexity of masking, and any additional services like re-ID scoring or test data generation. There are no long-term contracts, and you only pay for what you use.
9. Can DMaaS also generate test data?
Yes. IRI offers Test Data as a Service (TDaaS) to generate realistic, referentially correct test data for databases and structured/semi-structured files. This helps with DevOps, QA, benchmarking, and outsourced development without exposing real PII.
10. What are the benefits of using DMaaS over doing it in-house?
DMaaS saves time and resources by outsourcing masking to experts. There’s no need to learn complex software, hire additional staff, or reconfigure infrastructure. It also accelerates compliance, reduces breach risk, and ensures expert handling of sensitive data.
11. What kind of reporting or proof is provided?
IRI provides audit logs, masked outputs, and optional risk scoring reports to show what data was protected and how. This documentation can be shared with auditors, compliance officers, or insurers to demonstrate due diligence.
12. Can I switch to in-house masking after using DMaaS?
Yes. If you later decide to bring data masking in-house, IRI can transition the tools and pre-configured jobs used in DMaaS to your team, making it easy to take over the process without starting from scratch.
Share this page

Request More Information

Live Chat

* indicates a required field.
IRI does NOT share your information.