datalyptica sealfix

Fix production data without showing it to anyone.

Every data fix is reviewed and approved before it runs, and the customer data inside it stays sealed.

Datalyptica sealfix is open source, AGPL-3.0. PostgreSQL, Oracle and SQL Server.

FIX-1042 Correct account status Waiting for business approval
UPDATE accounts
   SET status = :new_status
 WHERE national_id = :national_id
DBA reviewer sees national_id sealed new_status sealed
Business sees 2990******1736, ACTIVE

How a fix reaches production

  1. Step 1

    The developer requests

    Writes the fix. Sensitive values are sealed the moment they are sent.

  2. Step 2

    The DBA reviews

    Checks the SQL without ever seeing the values.

  3. Step 3

    The business approves

    Confirms the change, with the values masked.

  4. Step 4

    sealfix runs it

    Exactly as approved. If anything differs, nothing changes.

Safe by design

Customer data stays sealed

Not in screens, logs or error messages. Only the fix itself reads the values.

Every fix can be undone

With the same approvals as the fix.

A log nobody can rewrite

Every action is recorded and protected against tampering.

Editions

Community

Free, AGPL-3.0

The full workflow. No limit on users or databases.

Get the code

Enterprise

Pricing on request

Everything in Community, plus executor keys in a hardware security module, a database account issued for each job, and support.

Talk to us

Runs inside your network

Self-hosted, one command, works offline.

Read the install guide
docker compose up -d