Data Security Platforms
Research preview. Based on public sources, not deployment testing.
← All platforms

Thales CipherTrust

Compare with…

CipherTrust combines data discovery with separately configured encryption and key-management components. Cloud key support does not establish content scanning or access governance for the same service. [1] [2]

Capabilities

Discovery & classification and Encryption & tokenization [1] [2]

Sources reviewed 2 sources

Data coverage

Read the scope beside each mark. Support for an environment does not establish every capability in every store.

Microsoft 365
Partial

Data Discovery and Classification lists Exchange Online and SharePoint Online. Confirm OneDrive and permissions-analysis scope. [1]

AWS
Partial

S3 discovery and AWS key-management integrations are documented. These are different components. [1] [2]

Google Cloud
Partial

Cloud Key Manager supports GCP key-management options. Content discovery across GCP stores is unconfirmed in these sources. [2]

Snowflake and Databricks
Unconfirmed
On-prem shares
Full

Discovery supports Windows/CIFS/SMB and Unix/NFS network storage. [1]

SaaS apps
Partial

Discovery includes Google Workspace. Key-management integrations include Salesforce, with different controls. [1] [2]

Unconfirmed means the reviewed sources do not establish coverage. How coverage is assessed

Deployment and cost

How it runs

Cloud Key Manager is a licensed component of the CipherTrust Manager appliance. [2]

Scope
Cloud key management and sensitive-data discovery use separate configurations.

Pricing and operating workload are not published in the reviewed sources.

Questions for the vendor

  1. Map each store to discovery, encryption and key-management components and quote them separately.
  2. Test application behavior, recovery and key rotation before enabling encryption in production.
  3. Which components and keys can remain entirely under your administrative control?

Sources

  1. cpl.thalesgroup.com
  2. thalesdocs.com