DG

VRX DataGuard

VERIFIABLE MINIMIZATION CONSOLE

🔒 Security Gate: Bearer Token Required

This deployment is protected by offline cryptographic access control. Enter your secret workspace token to authenticate and unlock the governance console.

Access tokens are managed offline on the host system (credentials.json) and bound to Admin, Operator, or Auditor roles. Tokens are never exposed over the network.
DG
VRX DataGuard VERIFIABLE MINIMIZATION
Governance Workflows
Trust Identity: demo-healthcare
Loading key...
Ed25519 Signed Evidence
Enterprise AI Trust / VRX DataGuard / Overview & Health
Role: Authenticating... Managed Store Active
SOC 2 • HIPAA • GDPR ART. 17 • EU AI ACT

Verifiable Data Minimization & Cryptographic Erasure

Guarantees live production PII/PHI is never leaked into staging databases and AI RAG pipelines.

Zero Production PII in AI Enclaves

VRX DataGuard uses domain-separated HMAC-SHA256 to tokenize relational identifiers while proving identical SQL join topologies before and after minimization. It executes scoped right-to-be-forgotten erasures with zero-overwrite disk semantics.

Offline Ed25519 Signatures
Managed Revision
0
Incremented on transactional erasure
Classified Customers
3
Root subject primary keys
Accounts & Claims
4
Relational FK descendants
Transcripts (JSONL)
3
RAG voice log records

Regulatory Compliance & Audit Framework Mapping

Framework Control Scope Enforced Mechanism Assurance Level
Loading compliance controls...
Metadata Discovery

Schema & Field Classification Policy

Fail-closed classification matrix. Every table, column, and nested JSON key must have an explicit rule.

Table: customers (Root Subject)

Primary Key: cust_id
Column Name SQL Data Type Policy Action Minimization Rationale
cust_idVARCHAR(32)tokenizeShared customer domain token; maintains FK link
full_nameVARCHAR(100)tokenizeDirect individual PII; pseudonymized
patient_mrnVARCHAR(20)tokenizeHIPAA medical record number; shared join domain
us_ssnVARCHAR(16)tokenizeSocial Security Number; shared join domain
iban_accountVARCHAR(34)tokenizeBanking IBAN identifier
phone_e164VARCHAR(20)tokenizeE.164 telecommunications identifier
emailVARCHAR(100)tokenizeEmail contact address
tax_tinVARCHAR(20)tokenizeTax identification number

Table: accounts_and_claims (FK Descendant)

FK: cust_id → customers.cust_id
Column Name SQL Data Type Policy Action Minimization Rationale
record_idVARCHAR(32)tokenizePrimary Key
cust_idVARCHAR(32)tokenizeForeign key to customers.cust_id
holder_ssnVARCHAR(16)tokenizeSSN join domain token
patient_mrnVARCHAR(20)tokenizeMRN join domain token
amount_usdNUMERIC(12,2)keepNon-sensitive aggregate financial value
hipaa_clinical_jsonbTEXT (JSON)jsonParsed as JSON; redact diagnoses/medications
Referential Integrity Proof

Sanitization & Relationship Topology Proof

Compare raw production inputs with sanitized outputs. Join pairs are mathematically verified before publication.

Cryptographic Relational Topology Proof

Verified Identical
Loading proof status...
Residual PII Scan: Passed. Zero occurrences of known sensitive values found in exported artifacts.

Before & After Minimization Comparison (Raw vs Tokenized)

Raw Production Database (Unsanitized)

Loading raw data...

Sanitized Export (Tokenized / Redacted)

Loading sanitized data...
GDPR Art. 17 / Right to be Forgotten

Scoped Cryptographic Erasure & Secure Delete

Calculates foreign key descendant closure and commits record deletions with signed evidence in a single transaction.

Two-Phase Erasure Protocol

Phase 1: Generate a 24-hour expiring, Ed25519-signed ERASURE_PLAN that computes the full FK descendant closure and validates legal holds.
Phase 2: Execute deletion with SQLite secure_delete=ON (overwriting disk sectors with zeroes) and co-commit the SCOPED_ERASURE_CERTIFICATE in the exact same database transaction.

Active Signed Erasure Plan

Status: Plan Signed & Pending Approval
Target Subject: CUST-9001 | Legal Hold: False (Cleared)
Descendant Closure: 1 customer record + 2 linked account/claim rows + 1 transcript record.
Plan SHA-256 Digest:

Erasure Execution Result & Evidence

Status: Deletion Committed in SQLite Transaction
Records successfully deleted with secure_delete. Database revision incremented.
Auditor Verification

Cryptographic Evidence & Tamper Rejection Proof

Independently verify Ed25519 certificate signatures and SHA-256 artifact manifests using the pinned auditor public key.

Tampering Resistance Demonstration

Fail-Closed Verification Triggered

Committed Execution Certificates

Loading certificates...
WORKSPACE AUTHENTICATION

Switch Role Token

Enter another authorized workspace role token (Admin, Operator, or Auditor) to switch your active session permissions.