Head-to-head · updated 13 September 2026
DataShield vs Privitar: where do you go now that Privitar is gone?
Start with the honest part. You can't buy Privitar. They bought it, in June 2023. The old site now points to theirs. The tech lives inside IDMC. It's called "Data Governance, Access & Privacy." Salesforce then bought them. That deal closed on 18 November 2025. Privitar was a good product. Its de-identification work was real. Plenty of banks still run it.
So this page is about the job. Not the logo. You came here for policy-driven de-identification. You didn't come here to buy a data platform. Here's what we do instead. We tokenize data at ingest. Agents query tokenized data over MCP. Detokenization is a gated, audited step. Below is the row by row. It includes the rows they win.
The short version
Pick DataShield when
- You wanted the de-identification tool. Not the data platform that now contains it. We ship PII and PHI classification across 129 field classes. Quasi-identifier generalization is a named feature too, and you can point right at it. See the Ontology surface.
- You need tokens that are reversible by rule. Not one-way masking. Ours are deterministic and join-preserving, so your analytics still work. Detokenization is a gated, audited step.
- An examiner will one day ask you to prove the access log wasn't edited. Our chain answers that with math. Run the verifier.
- The control plane has to run inside your own network. IDMC has no self-hosted control plane. We do.
Pick Informatica when
- You're merging vendors. You want catalog, quality, MDM, integration, and privacy on one contract. That's a real strategy. We can't serve it.
- You already run Informatica. The module is a line item on a renewal. Not a new buy. That's a big, boring edge.
- You need 50,000-plus source connectors. And decades of ETL history. We're a data and rules layer. Not an integration suite.
- You're a Salesforce shop chasing the Agentforce roadmap. Being owned by Salesforce reads as a plus to you. Not a risk.
Bottom line: want the Privitar job done? Buy a tool that still names the method. Want the big platform? Buy the platform. Just don't pretend the privacy module is why.
Feature by feature
Their cells describe what the vendor's public site and docs say. We use the date above. Did we get it wrong? Email support@myorg.ai. We'll fix it, and credit you.
| What matters | DataShield | Privitar / Informatica | Edge |
|---|---|---|---|
| Does the product still exist | Yes, sold and priced on its own. | Not as Privitar. They retired the brand. The site now forwards traffic. The feature sits inside IDMC's Data Governance, Access & Privacy. | ◆ |
| De-identification mechanism | PII and PHI classification against 129 field classes. Plus quasi-identifier generalization. Dates to year, decade or age band. ZIPs to 3 or 4 digits. Partial phones, SSNs and emails. Each column gets a cardinality-reduction score. Named and shipped in Ontology. | Privitar's roots here were strong. On the current pages, the only named method: role-based access control. Plus live data masking, down to rows and columns. We found no k-anonymity wording. | ◆ |
| Tokenization | Deterministic, join-preserving, vault-reversible tokens applied at ingest. Detokenization is a gated, logged step. | They describe masking and rule-based access. We found no public detail on a tokenization method. Not for the current module. Ask them. | ◆ |
| Audit evidence | SHA-256 hash chain with Ed25519-signed checkpoints. We chain the checkpoints too. The check names the failure: tampering, insertion, deletion, or truncation. Try the verifier. | Governance reports and policy audit, within IDMC. No public proof of tamper evidence, that we could find. | ◆ |
| Agent authorization | Each checked tool call passes a scope ceiling. It carries an authority tier too. A revocation re-check runs before dispatch. Revocation lands mid-session. | Rule-based access control over data. The agent story is prepping trusted data for agents. It's not a check on one single tool call. | ◆ |
| Break-glass | Scoped, time-boxed urgent access for agents. It auto-revokes. It can't be quietly deleted from the log. | Not named in public docs. | ◆ |
| GDPR erasure | Crypto-shred of per-subject keys. Plus ISO 27560 consent receipts. The audit chain still checks out once we delete it. | They claim GDPR, CCPA, and HIPAA support, at the platform level. How they delete data isn't spelled out. | ◆ |
| MCP and agents | Native MCP endpoints on Auth, Ontology, and Lighthouse. MCP tool tokens carry scope ceilings. Per-call metering ties back to the agent. | They name MCP on the home page. Also in a webinar: "Equip AI agents with trusted data using MCP." That's data prep. For other people's agents. | ◆ |
| Deployment | Self-hosted in your own cloud or data center. Or on a private single-tenant server we run. Your keys. | IDMC is SaaS. On-prem systems connect through a Secure Agent. It calls back to the cloud. No self-hosted control plane found. | ◆ |
| Platform breadth | Dataset platform, identity control plane, fleet and host daemons. No ETL suite. Our MDM is smaller than theirs, but it's exact. Fellegi-Sunter probabilistic record linkage. Jaro-Winkler, Levenshtein, Soundex, and Double Metaphone comparators. LSH blocking. EM-trained parameters. Five survivorship strategies. Drift checks on each promoted match config. | Catalog, integration, data quality, MDM, API management, a marketplace, and rules. Links to more than 50,000 sources. | ◇ |
| Maturity signals | Auth, Guardian and Lighthouse are live in production. Guardian and Lighthouse since April 2026. SOC 2 not yet certified, and we say so. | Founded 1993. A public firm, until Salesforce closed its $8B buy on 18 November 2025. Thousands of large customers. | ◇ |
| Pricing | Published model, scoped instant quote, no sales wall. | Usage pricing, in Informatica Processing Units. No public rate. You need a sales cycle to see a number. | ◆ |
◆ DataShield leads◇ Privitar / Informatica leads◈ comparable
We draw these claims from informatica.com and public records. Last checked 13 September 2026. We link them below, rather than paraphrase from memory.
Three things you get here that you won't get from a data management platform
Proof that survives an audit
A silently edited log proves nothing. Ours is a hash chain with signed checkpoints. The verifier tells you what went wrong. Not just that a thing did. That's the trait EU AI Act Article 12 reviewers care about. Also HIPAA §164.312(b) reviewers. Try it in your browser, no signup.
Authority that can change mid-flight
An analyst quits on a Friday. Their agent is still grinding through a 40-minute job. Here, we check the next checked tool call against current rights. It fails closed. Row-level masking won't save you here. The agent still holds a live session. How Auth does it.
An erasure you can defend
GDPR says delete. Your auditor says keep the log. Crypto-shred settles it. We destroy the subject's keys. The data turns to noise. The chain still verifies. See the diagram.
Where Privitar and Informatica are genuinely stronger
Privitar earned its name. It brought real privacy work to banks and health systems. Most vendors, back then, offered a regex and a shrug. The k-anonymity engine. The risk scores. The idea: hiding a name is a rule. Not a script. That was good thinking. We build on the same ideas. Informatica is a 1993 firm, with links into more or less everything. Want one vendor for pipelines, quality, MDM, catalog, and rules? We're not that vendor. We won't pretend to be.
Here's the push-back. A big company absorbs a small product. The method words go first. That's what we found. The hero on their privacy page now reads "Deliver trusted outcomes with AI-powered data governance." The only named method: role-based access. Plus live masking. That phrase isn't a method. So ask for a screen share. Ask to see the k-anonymity settings and the risk score, on your own data. Then ask for the re-identification report. If they show you, great. Does the demo turn into a platform tour instead? You have your answer.
Questions worth asking both of us
These are the questions we'd ask, if we were buying. Ask them on each vendor call, including ours.
Can I still buy Privitar?
No. They bought Privitar in June 2023. The old site now forwards to theirs for good. The tech ships inside IDMC, under Data Governance, Access & Privacy. They still support live deployments of it. Searching for a Privitar alternative? You likely want two things. Rule-driven de-identification. Tokens you can reverse under our rules. That's the part we do.
Do you have k-anonymity, like Privitar did?
Not k-anonymity. We won't claim a k we don't compute. Ontology ships PII and PHI classification, against 129 field classes. Plus quasi-identifier generalization. Dates to year, decade or age band. ZIPs to 3 or 4 digits. Partial phones, SSNs and emails. Each column gets a cardinality-reduction score. We pair that with tokens that are deterministic, join-preserving, and vault-reversible. So masked data still joins across sources. On their current public pages, we couldn't find k-anonymity. Named at all. Ask them: is the old engine still its own feature? Or just masking rules now?
Can you cryptographically prove an audit log entry wasn't deleted?
DataShield: yes. Each record commits to the one before it. We sign checkpoints. We chain them too. The check tells deletion apart from truncation and tampering. Run it against a sample chain at /verify. Informatica: they report on rules. But we found no public tamper-proof method. Ask them to show one.
What happens to a revoked agent mid-session?
We re-check rights on each checked tool call. So a pulled agent stops at the next call. Their controls sit at the data layer: rule-based access and masking. That's a separate question. We found no mention of agent tiers. Nor a mid-session cut-off. Ask how long a stolen agent keeps working. After you pull its access.
How does GDPR erasure interact with the audit trail?
We crypto-shred the subject's keys. Then we issue an ISO 27560 consent receipt. We commit actor names in the chain as HMAC hashes. The proof still stands, even after the subject is gone. They claim GDPR, CCPA, and HIPAA support, at the platform level. But how they delete data isn't public. Ask whether erasing a subject breaks the log.
Does it matter that Salesforce owns Informatica now?
It might. Salesforce closed its $8 billion buy on 18 November 2025. The home page now reads "Informatica from Salesforce." Do you run a mixed stack? Does Agentforce want a thing your stack lacks? Ask who sets the roadmap. We're small, and free of all that. It cuts both ways. No parent steering us. No parent balance sheet either.
Does DataShield have SOC 2?
Not yet. We won't imply otherwise. Auth is live. It has a public threat model. And a verifier anyone can run. Guardian and Lighthouse have run since April 2026. Design-partner terms include source escrow. So a small vendor isn't a single point of failure. Details on the security page.
- Informatica acquired Privitar in June 2023. It had once been worth about $400M. - Wikipedia, Informatica, 13 Sep 2026
- privitar.com returns 301 Moved For good to informatica.com. No standalone Privitar product page exists. - privitar.com, checked 13 Sep 2026
- Current hero, on Informatica's privacy and governance page: "Deliver trusted outcomes with AI-powered data governance." The only named protection method: role-based access control. Plus dynamic data masking, on top. - informatica.com, 13 Sep 2026
- Salesforce completed its $8 billion buy of Informatica, on 18 November 2025. The site now brands as "Informatica from Salesforce." - informatica.com, 13 Sep 2026
- IDMC pricing runs on usage. It's measured in Informatica Processing Units. No public rate card. - informatica.com pricing, 13 Sep 2026
- EDPB names pseudonymization as a GDPR risk mitigation for AI models. - EDPB Opinion 28/2024
Other head-to-heads
See both parts run in your browser. Generalize the data. Break a live audit chain. Then decide. Demo Center access is free with a work email.
Get free Demo Center accessYou've seen the proof
Ready for a number? Scope your deployment and we'll price it against your own economics.
Get your quote →