Skip to content

RedDB navigation

Blog · Category

Security

4 posts in this category.

  1. May 2026 Security · · 12 min Threat model: what RedDB protects against (and what it doesn't) An honest STRIDE walkthrough of the RedDB engine and vault. What the database protects against (cold-storage breach, replicated-secret leakage, key compromise during rotation) and what it does not (compromised application process, host-level side channels, malicious operator). Gaps are named, not hidden.
  2. Security · · 7 min Per-row encryption with zero-downtime key rotation How the vault keeps reads hot during rotation, and the one knob you should never touch in production.
  3. Security · · 10 min GDPR right-to-erasure when your data is replicated and embedded Article 17 across replicas, derived embeddings, backups, and WAL — what RedDB does automatically and what still needs an operator runbook.
  4. Security · · 9 min BYOK, KMS, and the boring parts of multi-tenant secrets AWS KMS, GCP KMS, and HSM integration for RedDB — plus the three failure modes nobody writes about until they happen at 03:00.

Get the next dispatch.

New essays on multi-model storage, RAG, agents, security. No spam.

No spam. Unsubscribe anytime.

RedDB Cloud

Join the private beta.

One-click managed deploy. Free during beta. Founding pricing locked at GA.