Apisecure, 14 & 15 March 2023 - Sean Falconer, Head of Marketing at SkyflowWhat.
summary
Argues that privacy is implementable as an API by isolating sensitive records into a data privacy vault that issues tokens instead of raw values. Describes a production service built over four years (Skyflow) supporting tokenization, masking and polymorphic encryption, with policy-based access control and context-aware auth. Cites Shopify’s three-year, ~100-engineer build as proof this is hard but feasible, and shows demos (role/row restrictions) that materially reduce breach scope.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:23Data privacy is hard
- 11:05Zero trust Vault for privacy
- 19:28API for privacy
- 23:42Data governance and access
- 35:20Engineering privacy
- 36:22Q&A
related talks
03mCustomer Spotlight
16mWhat if privacy had an API?
32mSecuring Value in API Ecosystems
01h 59mDeep Dive Workshop – Data Security and Data Protection
42mYour Data is Showing
29mAPI Security in 2017
48mAPI Security for Enterprises fireside chat
16mFuture-Proofing Your APIs: A Holistic Approach to Security, Privacy, and ROI.