Ubiq Dynamic Data Masking
Ubiq Dynamic Data Masking protects sensitive information by applying access rules when an identity requests data.
What Ubiq Dynamic Data Masking is
Ubiq Dynamic Data Masking protects sensitive information by applying access rules when an identity requests data. Depending on the identity, application, service account, API, or workflow, the same value can be returned as cleartext, partly or fully masked, tokenized, format-preserving protected, or encrypted. Data can remain encrypted, tokenized, or format-preserving at rest, with runtime policy deciding what users receive. The product supports both permanently masked copies for development, testing, vendors, and analytics, and dynamic decisions for production access. Connections are available through SDKs, APIs, SQL UDFs, and database and warehouse integrations; the catalog lists 49+ integrations, including PostgreSQL, MongoDB, Snowflake, Databricks, Power BI, and Tableau. Ubiq says it deploys within the customer’s environment, avoids acting as a masking proxy, and can protect data without schema changes where supported. Customers can bring their own HSM or KMS for key control. Enterprise Edition uses usage-based pricing through a private offer; additional AWS infrastructure costs may apply.
Good
- Runtime policies can vary data by requesting identity.
- Supports static masking and production-time decisions.
- Integration catalog lists 49+ connections.
- Customers can bring their own HSM or KMS.
- Deployment is inside the customer environment.
Watch out
- Enterprise Edition pricing is by private offer.
- Additional AWS infrastructure costs may apply.
- Protection without schema changes is only stated where applicable.
Who it suits
Ubiq may suit teams managing sensitive data across databases, analytics, customer support, development environments, or AI workflows. It is aimed at organisations that need identity-based access rules and customer-controlled key options.
Verdict
Ubiq offers multiple ways to control how sensitive values appear across development and production workflows. Its usage-based private-offer pricing and integration fit are important considerations.
Plans and prices
From Ubiq Dynamic Data Masking's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Ubiq Enterprise Edition | Priced on request | Private offer; usage-based pricing; unit count and terms depend on agreed scope |
The facts
Each one read from Ubiq Dynamic Data Masking's own pages, with the date it was checked.
What it does
- Architecture
- Ubiq says it does not sit between applications and databases as a masking proxy and supports protection without database schema changes where applicable.checked 3 Oct 2026
- At-rest protection
- Sensitive values can remain encrypted, tokenized, or format-preserving at rest while policy determines the runtime outcome.checked 3 Oct 2026
- Customer-managed keys
- Ubiq says customers can bring their own HSM or KMS so key control stays with their team.checked 3 Oct 2026
- Deployment and data location
- Ubiq says it deploys inside the customer’s environment and applies protection in supported application, API, database, warehouse, analytics, streaming, and AI data paths.checked 3 Oct 2026
- Identity-based masking
- The same protected value can resolve to a full, partially masked, fully masked, tokenized, or protected value based on the requesting identity, application, service account, API, or workflow.checked 3 Oct 2026
- Integration catalog
- The catalog lists 49+ integrations, including Okta, Microsoft Entra ID, PostgreSQL, MongoDB, Snowflake, Databricks, Apigee, Kong, Power BI, Tableau, and Qlik.checked 3 Oct 2026
- Integration methods
- The product integrates through SDKs, APIs, SQL UDFs, and database and data warehouse integrations.checked 3 Oct 2026
- Pricing
- The AWS Marketplace listing describes usage-based pricing and says the Enterprise Edition is structured through a private offer; additional AWS infrastructure costs may apply.checked 3 Oct 2026
- Static and dynamic modes
- Ubiq supports permanently masked copies for development, test, vendor, and analytics use, as well as runtime decisions for production access.checked 3 Oct 2026
- Support contact
- Ubiq directs users to contact technical support at [email protected].checked 3 Oct 2026
- What it does
- Ubiq protects sensitive data and decides at runtime whether each identity receives cleartext, masked, tokenized, format-preserving protected, or encrypted data.checked 3 Oct 2026
- Who it is for
- The product describes use cases for customer support, analytics and BI, databases and warehouses, development and test environments, insider-risk reduction, and AI, RAG, and agents.checked 3 Oct 2026
The company
- Founded
- 2020checked 28 Sep 2026
- Headquarters
- San Diego, California, United Stateschecked 28 Sep 2026
Alternatives to Ubiq Dynamic Data Masking
- 1

MySQL
Free planAPILinuxmacOSSelf-hosted7.9Free plan - 2

DBHawk
Free planWebAPILinuxmacOS7.6From $40 a month - 3
DataVeil
Free planLinuxSelf-hostedWindows7.5From $5,690 a year - 4
DB Audit and Security 360
WebAPILinuxSelf-hosted6.6$89 one-time - 5

Greenmask
Free planLinuxmacOSSelf-hosted6.3Free plan - 6
DataSunrise
WebLinuxSelf-hostedWindows6.1
