# securitybunker/databunker

Secure Vault for Customer PII/PHI/PCI/KYC Records

Repository: https://github.com/securitybunker/databunker
Canonical: https://ross.abutalabs.com/products/databunker
Homepage: https://databunker.org/
Language: Go
License: MIT
License Family: permissive
Topics: gdpr, pii, piidata, security, privacy, privacy-by-design, user-consent, ccpa, compliance, legaltech, anonymization, data-anonymization, database, encryption, vault, tokenization, application-server, passportjs, data-protection, secure-storage
Last push: 2026-07-28T09:36:53+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 94, release rhythm 35, longevity 100
- inputs: {"age_days": 2460, "days_push": 36, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1482, forks 97 (observed 2026-08-28T04:04:51.018815+00:00)

## What it is
Databunker is a self-hosted, Go-based secure vault for tokenizing and storing personal records such as PII, PHI, KYC, and PCI data. It exposes a NoSQL-like API so backends can reference sensitive data by UUID tokens while all records remain encrypted at rest.

## Use cases
- store customer PII in a GDPR-compliant vault
- tokenize user records so apps never hold plaintext personal data
- protect PHI and KYC records from SQL injection leaks
- replace naive database encryption with API-level data protection
- support CCPA and privacy-by-design compliance workflows
- self-host encrypted personal data storage with hash-based secure search

## When to choose
- you need self-hosted, API-driven tokenization of personal data
- compliance with GDPR/CCPA requires encrypted, auditable PII storage
- you want to prevent plaintext exposure from SQL or GraphQL injection

## When to avoid
- you only need disk-level encryption of an existing database
- you require credit-card tokenization or enterprise features (consider Databunker Pro)
- your stack cannot run an additional self-hosted service

## Facets
- artifact type: service
- maturity: active
- function: security, cryptography, database, http-server, api-framework, search-engine
- domain: security, privacy, self-hosted, backend, legal
- platform: self-hosted, go, cloud
- tags: pii, tokenization, gdpr, ccpa, data-protection, vault, anonymization, kyc, encryption-at-rest, docker, linux

## Member repositories
- securitybunker/databunker (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:51.018815+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:34:08.830036+00:00, confidence not recorded.
  - readme: https://github.com/securitybunker/databunker (fetched 2026-08-28T04:04:51.018815+00:00, sha 4bd6ebf14541)
- Data as of 2026-08-30T08:39:29.467469+00:00.