| Specification | Current statement | Release gate | State |
|---|---|---|---|
| Selected fields | Candidate protection only. | Selection and stored form are not committed. | Research |
| Application process | Plaintext may exist on an authorized path. | Authorization and key access remain open. | Pending |
| Middleware process | Exposure depends on the topology. | Process and service identity remain open. | Pending |
| Database write | Timing differs between candidates. | No ciphertext-at-write claim. | Pending |
| Replicas and backups | Stored form depends on transformation timing. | Verify after the topology decision. | Pending |
| Key custody | Release key path is not published. | Custody and recovery remain open. | Pending |
| Current CDC | Database write precedes CDC processing. | Observed topology; not a release promise. | Pending |
| Target inline | Transformation would precede the write. | Target proposal; not a release promise. | Pending |
| Application change | Compatibility impact is open. | Integration and query impact are open. | Pending |
Database Encryption
Selected-field protection is in development; topology, plaintext boundaries and release review remain open.
Data flow and topology
Mode candidates
| Specification | Candidate behavior | Leakage / query limit | Cost / release limit | State |
|---|---|---|---|---|
| Format-preserving candidate | Would retain format under domain constraints. | Deterministic use reveals equality; general queries are not preserved. | Standards fit and implementation remain open. | Research |
| Blind-index search candidate | Would use a separate key for equality lookup. | The index reveals equality; arbitrary search is not preserved. | Adds key, write, index and query costs; implementation remains open. | Research |
Engine targets
- MariaDB
- Repository target; version, topology and support remain open.
- Research
- MongoDB
- Repository target; version, topology and support remain open.
- Research
- Other engines
- No candidate target is published.
- Not offered
- Compatibility
- Drivers, queries, indexes, migrations, replicas and backups remain open.
- Pending
- Performance
- No benchmark without data and methodology.
- Pending
Adjacent products
| Specification | Category boundary | Maturity | State |
|---|---|---|---|
| Database Encryption | Candidate change to selected fields' stored form. | In development; release gates remain. | In development |
| Dynamic masking | Would alter a caller's view, not stored data. | Research extension; not a feature. | Research |
| Activity monitoring | Would observe database activity for audit. | Research extension; not a feature. | Research |
Release gates
Target topology
An inline path is a proposal only; product engineering has not confirmed it for release.
Pending
SOURCE / Information needed / item 21
Security review
Pre-launch security review is incomplete; release remains gated on remediation and re-verification.
Pending
SOURCE / Information needed / item 44a
Compatibility
No application, driver, query, index, backup, replica, or migration compatibility claim is published.
Pending
SOURCE / Database product brief / feature gates
Performance
No performance or overhead claim is published without data and methodology.
Pending
SOURCE / Claims register / evidence requirement