Secure Vault for Customer Personal Records in Under 10 Minutes

Databunker is an open-source vault for secure storage of PII, PHI, KYC, and PCI records. Protect user records from SQL and GraphQL injections with a simple API. Streamline GDPR, HIPAA, ISO 27001, and SOC2 compliance.

Live demo Learn more

docker run -p 3000:3000 -d securitybunker/databunker demo
# save user records
curl -s http://localhost:3000/v1/user -X POST -H "X-Bunker-Token: DEMO" -H "Content-Type: application/json" \
-d '{"first":"John","last":"Doe","login":"john","email":"user@gmail.com"}'
# user lookup by login, email, phone, or token
curl -s -H "X-Bunker-Token: DEMO" -X GET http://localhost:3000/v1/user/login/john

How to implement log retention policy without breaking GDPR compliance

When it comes to handling Personal Identifiable Information (PII), identifying strong and weak user identifiers becomes essential. Strong identifiers include usernames or email addresses, while weak identifiers consist of IP addresses, browser user agents, cookies, or session IDs. Combining weak identifiers can create a strong user identifier, raising privacy concerns.

If your company serves European customers, GDPR compliance is non-negotiable, irrespective of your location.

Saving log events must be done carefully to ensure GDPR compliance. Simply storing customer IP addresses, browser user agents, or cookie IDs in web server or cloud logs may render your system non-compliant unless specific measures are taken.

Use Short Log Retention Policy: Implement an automatic log retention policy, removing log events older than a few weeks or up to one month, minimizing data storage and privacy risks.
Encrypt Strong and Weak Identifiers: Before saving any personal records in logs, ensure all strong and weak identifiers are encrypted, protecting sensitive information.
Use Databunker Session Tokens: Databunker offers a unique session token to be saved in server log files. This special token allows you to access session information without an additional password for a limited time, typically up to one month.

Unlocking the Power of Databunker Session Token:

Databunker presents a specialized session token designed to enhance your logging practices. With Databunker’s additional API, access session information is made convenient and secure without the need for an extra password, maintaining privacy standards.