Column encryption
AES-256-GCM on chosen columns in PostgreSQL, MySQL, and SQL Server.
Pick the column
Encrypt the fields that need it — national ID, account number, email, card number. Other columns on the row stay readable. A database login does not by itself reveal the protected field, which is the difference from encrypting the disk or the whole table.
Application and direct access
An application connection that presents a session token keeps its existing SQL. AudiCipher decrypts for an allowed caller and encrypts new writes.
A direct connection without a token receives ciphertext. The database files alone, without the key service, do not yield the value.
Databases
PostgreSQL, MySQL, and SQL Server from one control plane. The algorithm is AES-256-GCM.