DataVeil Data Masking Features

Features Overview

We would like to introduce some of the features of the DataVeil data masking software below.

Some points of difference between DataVeil and other data masking tools are also mentioned.



Ease of use has been a design priority. Your database schema is represented as both an Explorer Tree and diagrammatically making it simple to click on a field and select a mask.

Other masking tools may provide a GUI but often require you to manually search and enter table and/or column names which can become repetitive, laborious and impact on your workflow.

Preview Before & After Masked Values

You can preview original and masked values side-by-side without overwriting the original data.

This helps you confirm that your masks will generate the values that you expect.

Preview before & after data masking values side-by-side

Consistent & Random Masking Options

You can mask an original value consistently with the same masked value throughout the database and even across multiples databases. The same masked value will be used even on repeated and independent runs, i.e day, months or years later.

You can alter the determinism by specifying keys – on a per-mask basis and as a project default key. As an added security feature, every customer site license will generate different deterministic results – even when using the same keys as another site.

Random mode means that the masked values shall be random on each masking run.




Partial Masking to Preserve Statistical Distributions

Many of DataVeil’s masks support partial masking. The idea is to preserve a non-sensitive portion of the original value so that the statistical distribution of the original data remains the same after it has been masked.

For example, the Primary Account Number (PAN) mask allows the optional preservation of leading digits. Therefore, when masking credit card numbers you can ensure that the exact distribution of credit card issuers is maintained in the masked result. Other masking tools may require you to nominate how many of each type of credit card to include. This could not only lead to a false representation of what is in your Production data, but some issuers (which could be vital for testing) may be erased altogether.


DataVeil helps you find your sensitive data using its regular expression-based search capabilities.



The Randomize Mask

This is a very versatile mask that is useful for a broad range of sensitive data. It will replace alphabetic characters with alphabetic characters (preserving case), digits with digits, while preserving whitespace and special characters. Partial masking is supported so that you can specify what parts of a sensitive value are to be masked (or preserved). For example, suppose that you wanted to preserve the last 6 digits of all phone numbers. This means that country codes, area codes and formatting would be preserved, which maintains the statistical distribution of the original phone number data, and also the exact format of every individual phone number is also preserved. This enhances the realism of the masked data and is especially useful for testing. Other masking tools may require you to define a fixed format that will overwrite the original data formats which is usually undesirable.

National Identifiers

DataVeil has built-in support to generate US Social Security Numbers and Canadian Social Insurance Number.



Partitioned Shuffle

Although the Shuffle mask is common among masking tools, DataVeil extends this by providing a partitioned shuffle capability.

This means that you can very easily shuffle within ranges within one or more columns – such as shuffle address columns within rows that have the same postal code. All that is required to achieve this is to specify the column (or multiple columns) that define the partition value.

Use Your Own Substitution Data

You can use your own data files as substitution data. DataVeil can use one or more columns from any standard CSV format file.

Note: DataVeil does NOT require you to prepare the CSV file in some specific way. i.e. Some masking tools may require you to insert a sequence number column, or remove unused columns, include or remove a heading row, etc.



Referential Integrity

DataVeil maintains referential integrity automatically for fields that have dependencies defined within the database (foreign keys). You can also add user-defined dependencies within a DataVeil Project. Even if there are no actual dependencies defined, DataVeil can inherently synchronize dependent values by using deterministic mode masking. Deterministic masking means that a specific sensitive value will always be transformed to a specific masked value – even if it is on another database and masked in a separate Run at a different time.

Dependency Management & Obfuscation

You can disable dependencies so that DataVeil can effectively re-organize parent-child relationships. This is useful to obfuscate strategically sensitive information while the aggregate results are preserved. For example, if you need to provide your sales volume data for review but wish to obfuscate which were the most lucrative sales locations then you could redistribute child sales records to different parent store locations. The aggregate sales results would remain the same.



Refresh & Migrate Projects

If your schema changes then you can use the Refresh feature to synchronize those changes into your Project.

The Migrate feature lets you move your masks to a different schema. It can even migrate to a significantly different schema on a different DBMS – such as migrating an Oracle masking Project to SQL Server or vice versa.


The User SQL Value mask lets you specify any SQL that returns a value.

This can be a constant, an SQL statement or a call to a User Defined Function.



Automatic Execution Order

If you have masked fields that depend on other masked fields then DataVeil shall automatically determine the correct execution order.

Some other masking tools require you to explicitly define the required execution order.


All masking is one-way and cannot be reversed. Furthermore, DataVeil shall produce a different set of masked results per licensed customer. Therefore, another instance of DataVeil (outside of customer’s licensed sites) will not produce the same masked results on the same original data in case such a brute force attack is attempted to determine the original sensitive values.

Simple XML Project Files

DataVeil data masking Project files are saved as plain XML text files. This makes it very easy to incorporate DataVeil into your existing version control systems.

Multiple Conditional Masks

You can define multiple conditional masks for each sensitive column. The first mask whose condition is satisfied shall be used.

Simple to Install & Maintain

Just download, unzip, and run the executable file. DataVeil does not modify your registry or system configuration. There are no servers to install. No internet connection is required. This enables quick and easy installation in secure environments.


DataVeil is among the fastest data masking tools available. It can do in minutes what other masking tools take hours or even overnight. The reality is that you will likely run your masking jobs many times. Over the course of time, DataVeil can literally save you days or even weeks of time waiting.

Simple Licensing

Licensing is simple to understand. It is based on the number of concurrent users and the maximum number of sensitive values per Project. You can always mask an unlimited number of target databases that can be of any size and you can create an unlimited number of Projects.


Forgot Password?

Join Us

Password Reset

Please enter your e-mail address. You will receive a new password via e-mail.