Sold by: BoundaryLogic
Deployed on AWS
Mask production PostgreSQL into realistic, referentially-intact staging data inside your own AWS VPC, with no PII leaving your network. PrivaCI runs as a one-shot container job with deterministic PII masking, FK-aware subsetting, schema-drift CI gates, and Ed25519-signed compliance evidence.
Overview
PrivaCI runs as a one-shot container job inside your AWS VPC. It reads PostgreSQL source data, masks PII deterministically, and writes sanitized rows to a target database. No data leaves your network there is no SaaS control plane and no telemetry.
Both tiers include the full open-source masking engine (regex + NER detection, deterministic faking, referential integrity, resumable streaming runs). The paid tiers add commercial capabilities on top:
- Deterministic keyed masking (hmac_hash / pseudonym) stable pseudonyms across tables and runs.
- JSONB path masking mask fields inside JSONB documents by path.
- FK-aware data subsetting copy one tenant to staging with foreign-key closure, not the whole database.
- Schema-drift detection fail CI when the schema changes out from under your mask rules.
- Strict-gate CI preview sample rows, policy diff, and SARIF output for pull-request gates.
- Ed25519-signed compliance reports tamper-evident JSON (plus Markdown / PDF summaries) mapped to common control frameworks.
Requirements: a PostgreSQL source and target, and a container runtime (Amazon ECS or docker run for v1; EKS / AWS Batch / Kubernetes CronJob on request). Entitlement is resolved at job start via AWS License Manager; the task role needs only license-manager:CheckoutLicense / CheckInLicense.
Highlights
- In-VPC batch job: mask PostgreSQL inside your VPC with no SaaS data exfiltration
- Realistic staging at any size: FK-aware subsetting copies one tenant with referential integrity intact
- Audit-ready Ed25519-signed compliance reports and schema drift evidence for CI
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
ECS Fargate one-shot batch job
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Standard | Flat monthly tier for teams that need realistic, safe PostgreSQL staging data. Run PrivaCI as a one-shot container job in your VPC. Includes the full masking engine plus deterministic keyed masking (hmac_hash / pseudonym) and JSONB path masking. No source-database or data-volume limits. | $149.00 |
Compliance | Flat monthly tier for regulated and platform teams. Everything in Standard plus FK-aware data subsetting (copy one tenant to staging with referential integrity), schema drift detection for CI gates, strict-gate CI preview with SARIF, and Ed25519-signed compliance reports. No source-database or data-volume limits. | $749.00 |
Vendor refund policy
PrivaCI refunds: AWS bills via Marketplace. Full refund if you cancel within 48 hours of purchase (AWS standard). After 48 hours, contact support@boundarylogic.io with AWS account ID, subscription date, and reason; we review case-by-case (billing errors, duplicate subs). Support: https://boundarylogic.io/support
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
ECS Fargate one-shot batch job
Supported services: Learn more
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
PrivaCI Commercial 1.0.12 (engine v1.2.0)
Added
- Signed report schema_objects collectors for created_object, definition_only_object, and skipped_object (Markdown and PDF Schema objects section). Materialized views record contents_copied: false by default.
- Schema-mode matrix integration coverage for assume_existing and truncate (JSONB, subset, subset+JSONB, licensed roundtrip) when the engine pin supports schema_mode.
Changed
- Engine pin promoted to v1.2.0 for schema replication modes and the new audit taxonomy.
- Default Marketplace image references bumped to 1.0.12.
Documentation: https://docs.boundarylogic.io/commercial/deployment-options/ Support: support@boundarylogic.io
Additional details
Usage instructions
After subscribing, deploy in your VPC (recommended: ECS Fargate + CloudFormation).
- One-time per account: open AWS License Manager console and grant permissions (or see troubleshooting - "Service role not found" on first run).
- Create two PostgreSQL databases (source with data, empty target).
- Create Secrets Manager secrets for SOURCE_DB_URL, TARGET_DB_URL, ANONYMIZATION_SALT. Full step-by-step: https://docs.boundarylogic.io/commercial/deploy-aws-ecs/#21-create-secrets-manager-secrets
- Upload mask-rules.yaml to S3 (or mount via EFS).
- Deploy the quick-launch CloudFormation template: https://docs.boundarylogic.io/commercial/assets/quick-launch.yaml
- ECS RunTask with the stack's task definition.
Image: 709825985650.dkr.ecr.us-east-1.amazonaws.com/boundarylogic/privaci-commercial:1.0.12 Entrypoint: privaci (do not override)
The stack creates IAM (CheckoutLicense). You supply databases, secrets, and config.
Documentation: https://docs.boundarylogic.io/commercial/deploy-aws-ecs/ Support: support@boundarylogic.io
Resources
Vendor resources
Support
Vendor support
Email: support@boundarylogic.io Support page: https://boundarylogic.io/support Documentation: https://docs.boundarylogic.io/
Commercial subscribers receive email support through support@boundarylogic.io . We aim to respond within one business day for severity-1 (production blocking) issues and within three business days for general questions. Do not send production PII in support requests. Describe schema, exit codes, and redacted logs only.
Privacy policy: https://boundarylogic.io/privacy Terms of service:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Meet the privacy and data security requirements to grow business. Kaamel’s security and privacy veterans can assist you with 10+ years of hands-on experience.
A-LIGN offers a powerful solutions to safeguard your customers' and partners' information Combining our expert privacy staff with our advanced compliance management technology, we help you achieve GDPR and Privacy compliance in a fraction of the time required by other privacy professionals. With A-LIGN, you can assure your customers and partners that their information is private.
Evaluate privacy awareness with RBAC for an LLM based chatbot such that responses to information seeking queries respect access controls.
This model blurs the faces of people in an image to preserve privacy
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.