DataStealth Hybrid is a data protection platform that unifies security enforcement across on-premises data centers and cloud environments (AWS, Azure, GCP) from a single control plane. The platform applies tokenization, masking, and encryption policies consistently across both environments, addressing compliance requirements such as data residency regulations without requiring application rewrites. Deployment models include: - Inline gateway or proxy for real-time field-level tokenization or masking - Database and data-store proxy for SQL and NoSQL traffic - Sidecar or service mesh integration for per-service policy enforcement - Batch and streaming workers for pipeline, data lake, and streaming protection Key operational capabilities include centralized policy management with versioning, approvals, and rollbacks; active-active high availability across cloud regions and data centers; and audit logging exportable to SIEM systems. The platform supports field-level protection across web and API traffic (HTTP, REST, gRPC, GraphQL), databases and warehouses (RDS, Snowflake, BigQuery, SQL Server, Oracle), file shares and object stores (CIFS, NFS, S3-compatible), messaging and streaming systems (Kafka, ETL pipelines), and observability tooling (logs, traces, tickets). Key management supports on-premises KMS/HSM and cloud KMS providers with BYOK/HYOK options. All connections are secured via TLS and mTLS. Access to cleartext data is controlled through attribute-based, role-based policies.