Skip to content

APIgator Overview

APIgator is eXate's API-based data protection service. It enables applications, services, and integration platforms to protect structured data using privacy-enhancing techniques (PETs) through REST or gRPC APIs, without requiring changes to existing applications or direct integration with data sources.

APIgator acts as a policy enforcement point between applications and the data they consume. For each request, it evaluates the configured Manifest and applicable Policies before applying the appropriate privacy-enhancing techniques. This ensures that the Principle of Least Privilege (PoLP) is consistently enforced and only the appropriate level of data is exposed.

When to use APIgator

APIgator is ideal when:

  • Applications need to protect data without direct database integration.
  • Data must be protected before being shared with downstream systems or services.
  • Multiple applications require consistent, policy-driven data protection.
  • REST or gRPC APIs are preferred over embedded libraries or database proxies.
  • Existing applications cannot be modified to implement privacy logic.

Key capabilities

APIgator provides:

  • REST and gRPC interfaces for protecting structured data and files.
  • Policy-driven enforcement using Manifests and Policies.
  • Support for masking, tokenisation, encryption, pseudonymisation, and other privacy-enhancing techniques (PETs).
  • Dataset, record, and field-level protection.
  • Consistent policy enforcement across multiple applications and services.
  • Integration with gateways, middleware, microservices, and other application architectures.

How APIgator works

  1. An application submits data or a dataset to APIgator.
  2. APIgator evaluates the configured Manifest and applicable Policies.
  3. The required privacy-enhancing techniques are applied to the data.
  4. The protected data is returned to the calling application.

Documentation

For step-by-step configuration and integration guides, see: