Home / Product Demos / Kafka Field Level Encryption End To End

Product Demo

Kafka Field-Level Encryption End to End

Encrypt sensitive fields in Kafka records with Conduktor Gateway: encrypt on produce, rotate keys in Vault, and control which apps decrypt which fields.

Watch Demo
Kafka Field-Level Encryption End to End

Encrypt sensitive fields in your Kafka records without changing a single line of client code. Conduktor Gateway sits between your applications and your cluster, encrypts PII on produce using keys from your KMS, and decrypts on consume based on who is asking. The full walkthrough, from the architecture diagram to schema-tag encryption.

What You'll Learn

  • How Gateway encrypts fields before data reaches the broker, with keys managed centrally in your KMS
  • How to rotate keys in HashiCorp Vault and instantly revoke access to data encrypted with old key versions
  • How to scope decryption to service accounts or groups, so each app sees only the fields it's allowed to see
  • How application teams tag PII in their Avro schema and Gateway encrypts tagged fields automatically