Skip to main content

Encryption Patterns Explorer

Use the stage controls to compare the synthetic input, authored output, and configuration at each step.

How to use this explorer

Move between stages with the arrows or the numbered stage list. Each stage shows the input it receives on the left and the output it produces on the right, with the lines that changed marked. The configuration that makes the change sits below the comparison, and the final stage shows the complete pipeline.

The 6 stages in order

  1. Original Sensitive Data
    Synthetic payment and customer fields before the example applies field-level encryption patterns.
  2. Payment Field Encryption
    Select synthetic card fields for the configured encryption processor and retain authored display fields.
  3. Identity Field Encryption
    Select synthetic identity fields for encryption and retain authored derived fields.
  4. Address Data Encryption (Location Privacy)
    Encrypt street addresses and detailed ZIP codes while preserving city, state, and ZIP prefix for demographic analytics.
  5. Temporal Field Encryption
    Encrypt selected source dates while retaining authored cohort and season fields for inspection.
  6. Illustrative Key-Version Metadata
    Combined authored field-selection patterns with illustrative key-version and transformation metadata.

Interactive pipeline

ENCRYPTION PATTERNS

Field-selection patterns

Stage 1 of 6

Original Sensitive Data

Synthetic payment and customer fields before the example applies field-level encryption patterns.

0HighlightsAuthored emphasis only—not a computed diff.
Copy & download

Input

{"transaction_id": "txn-12345","payment": {"card_number": "4532-1234-5678-9010","cvv": "123","cardholder_name": "Sarah Johnson"},"customer": {"email": "[email protected]","ssn": "123-45-6789"}}

Output

{"transaction_id": "txn-12345","payment": {"card_number": "4532-1234-5678-9010","cvv": "123","cardholder_name": "Sarah Johnson"},"customer": {"email": "[email protected]","ssn": "123-45-6789"}}
Complete pipeline01-original-sensitive-data.yaml
# Stage 1: Original Data Input
# No encryption applied yet - all sensitive data visible

input:
  http_server:
    address: "0.0.0.0:8080"
    path: "/encrypt"

pipeline:
  processors:
    # Passthrough - no encryption yet
    - mapping: |
        root = this

output:
  stdout: {}