Sensitive data in Elastic Search and Operate

Camunda 8 Topics Discussion & Questions
1

Hello experts,

My team is planning to use Camunda 8 with zeebe. However we have some sensitive(PII) data which we don’t want to go in either Elastics search or operate. How can I control this type of data going in Elastic search and hence will not show up in Operate. Please suggest.

Cheers
K

2

Hi @kgoyal,

one way would be to tokenize your data:

  • save the personal data in your own storage, accessible with an anonymous key
  • all workers should access the data via the key
  • only save the key and the variables to control conditions on gateways as process variables

Hope this helps, Ingo

3

Thank you Ingo. Is there any other recommendation you have? The downside of this approach is each task has to query this storage to get the data. Please advice.

Cheers
K

4