Supported solutions
Integration options, supported databases, and performance characteristics for CipherStash encryption
CipherStash offers multiple integration paths designed for developer productivity and production readiness.
Integration options
Encryption SDK
Best for: Teams who want fine-grained control over data encryption directly in their application.
The @cipherstash/stack SDK provides application-layer encryption with full TypeScript support, schema-based configuration, and searchable encryption capabilities.
- Languages: TypeScript / JavaScript (Node.js)
- ORMs: Drizzle, Supabase
- Dashboard: Connect Supabase from the dashboard — OAuth, EQL readiness, OIDC, and Marketplace install
- Get started: Encryption SDK guide
CipherStash Proxy
Best for: DevOps teams who want to add encryption to existing PostgreSQL applications with little to no code changes.
A drop-in SQL proxy for PostgreSQL that automatically handles encryption and decryption operations.
- Database: PostgreSQL only
- Get started: Proxy guide
Supported databases
Database compatibility
| Database | Standard encryption | Searchable encryption |
|---|---|---|
| PostgreSQL 15+ | Yes | Yes |
| AWS RDS PostgreSQL | Yes | Yes |
| AWS Aurora PostgreSQL | Yes | Yes |
| GCP Cloud SQL for PostgreSQL | Yes | Yes |
| Azure Database for PostgreSQL | Yes | Yes |
| OCI Database Service for PostgreSQL | Yes | Yes |
| DynamoDB | Yes | Yes |
| Supabase | Yes | Yes (EQL + Stack) |
| Neon Postgres | Yes | — |
| MySQL | Yes | — |
| CockroachDB | Yes | — |
Standard encryption works with any database that supports JSON or JSONB column types. Encrypted values are stored as JSON objects (CipherCells).
Searchable encryption requires EQL (for PostgreSQL) or native integration (for DynamoDB). Searchable encryption enables equality lookups, range queries, ordering, and free-text search on encrypted data without decryption.
Performance characteristics
SDK integration
- Latency: Less than 5ms overhead for most operations
- Throughput: Scales with your application
- Setup time: Running in local dev in under 1 hour, production in under 3 days
Proxy integration
- Latency: Less than 5ms overhead for most operations
- Throughput: Horizontally scalable based on database throughput
- Setup time: Operational in hours with existing PostgreSQL
Getting started
- Choose your integration path based on your application type and requirements
- Review the getting started guide for your selected solution: Encryption SDK or Proxy
- Set up your development environment with the appropriate SDK or proxy
- Provision credentials in the CipherStash Dashboard
- Deploy to production with confidence in your security posture
Members
Manage CipherStash organization members and workspace memberships in the Dashboard, and onboard developer devices with stash init for local development.
The CipherCell
Understand the CipherCell, the CipherStash JSON format that stores ciphertext, searchable encrypted metadata, and fields for querying encrypted data via EQL.