Sensitive data in Elastic Search and Operate

Hello experts,

My team is planning to use Camunda 8 with zeebe. However we have some sensitive(PII) data which we don’t want to go in either Elastics search or operate. How can I control this type of data going in Elastic search and hence will not show up in Operate. Please suggest.


Hi @kgoyal,

one way would be to tokenize your data:

  • save the personal data in your own storage, accessible with an anonymous key
  • all workers should access the data via the key
  • only save the key and the variables to control conditions on gateways as process variables

Hope this helps, Ingo

Thank you Ingo. Is there any other recommendation you have? The downside of this approach is each task has to query this storage to get the data. Please advice.