Supported solutions
Integration options, supported databases, and performance characteristics for CipherStash encryption
Supported solutions
CipherStash offers multiple integration paths designed for developer productivity and production readiness.
Integration options
Encryption SDK
Best for: Teams who want fine-grained control over data encryption directly in their application.
The @cipherstash/stack SDK provides application-layer encryption with full TypeScript support, schema-based configuration, and searchable encryption capabilities.
- Languages: TypeScript / JavaScript (Node.js)
- ORMs: Drizzle, Supabase
- Get started: Encryption SDK guide
CipherStash Proxy
Best for: DevOps teams who want to add encryption to existing PostgreSQL applications with little to no code changes.
A drop-in SQL proxy for PostgreSQL that automatically handles encryption and decryption operations.
- Database: PostgreSQL only
- Get started: Proxy guide
Supported databases
Database compatibility
| Database | Standard encryption | Searchable encryption |
|---|---|---|
| PostgreSQL 15+ | Yes | Yes |
| AWS RDS PostgreSQL | Yes | Yes |
| AWS Aurora PostgreSQL | Yes | Yes |
| GCP Cloud SQL for PostgreSQL | Yes | Yes |
| Azure Database for PostgreSQL | Yes | Yes |
| OCI Database Service for PostgreSQL | Yes | Yes |
| DynamoDB | Yes | Yes |
| Supabase | Yes | Coming soon |
| Neon Postgres | Yes | — |
| MySQL | Yes | — |
| CockroachDB | Yes | — |
Standard encryption works with any database that supports JSON or JSONB column types. Encrypted values are stored as JSON objects (CipherCells).
Searchable encryption requires EQL (for PostgreSQL) or native integration (for DynamoDB). Searchable encryption enables equality lookups, range queries, ordering, and free-text search on encrypted data without decryption.
Performance characteristics
SDK integration
- Latency: Less than 5ms overhead for most operations
- Throughput: Scales with your application
- Setup time: Running in local dev in under 1 hour, production in under 3 days
Proxy integration
- Latency: Less than 5ms overhead for most operations
- Throughput: Horizontally scalable based on database throughput
- Setup time: Operational in hours with existing PostgreSQL
Getting started
- Choose your integration path based on your application type and requirements
- Review the getting started guide for your selected solution — Encryption SDK or Proxy
- Set up your development environment with the appropriate SDK or proxy
- Provision credentials in the CipherStash Dashboard
- Deploy to production with confidence in your security posture