What even is Databolt

Databolt swaps secret numbers for look-alike stand-ins that the company's programs can still use.

Databolt is software sold by Capital One, the bank. A company runs it on anything sensitive. That includes card numbers, ID numbers, emails, and data headed for AI.

It works like a secret code kept by one trusted clerk. Hand the clerk HELLO and the same scrambled word always comes back. Only the clerk can undo it, and only for people the rules allow.

A real card number on a red statement row passes through a box holding a key and comes out on a teal row as a stand-in number of the same length with different digits. real card number 4111 2298 5570 4444 Databolt stand-in number 4111 2298 5570 4444 7308 7719 0254 1962 16 digits still 16 digits same secret in, same stand-in out, every time the box keeps the key; the rules say who may ask for the secret back
The red row is the secret. The teal row flashes the secret, then holds the stand-in.

The stand-in keeps the same shape, so programs that store it keep working.

A program that expects a card number expects 16 digits. The stand-in is 16 digits, so it fits.

Ordinary encryption, the kind that protects files and connections, turns the number into a long jumble. That jumble does not fit the slot, so the program breaks.

There is also a kind of encryption that keeps the shape. Stand-ins work in that spirit.

Two form slots sized for 16 digits. The stand-in number fits the first slot. A long encrypted jumble spills past the second slot, which is drawn broken. card number slot in a payments program 7308 7719 0254 1962 fits, program stores it the same slot given the usual encrypted jumble x9Qf+Lp2/Vt7aR8w==Jk3bN0zYqE1dSm4Hc6uWvT0pLg too long for the slot, program stops
Top: the stand-in in a 16-digit slot. Bottom: an encrypted jumble overflowing the same slot.

The same secret always gets the same stand-in, so analysts can still count and match.

An analyst never needs the real number. They need to know which rows belong to the same customer. Because one secret always becomes one stand-in, matching still works across tables.

Sameness has a cost. Anyone who can make stand-ins could feed in guesses and see which stand-in matches. So the rules also limit who may make them.

A payments table and a complaints table, each listing stand-in numbers. Lines join the matching stand-in 7719 0254 1962 in both tables, and a count beside them reads three payments, one complaint. payments …7719 0254 1962 …3310 8864 1207 …7719 0254 1962 …7719 0254 1962 complaints …0042 9918 7731 …7719 0254 1962 same stand-in: 3 payments, 1 complaint grey rows are other customers' stand-ins
Teal rows share one stand-in. The dashed lines are the matches an analyst can still make.

There is no vault, because the stand-in is computed with a key instead of looked up.

Some tools work like a coat check. Hand over the secret, get a ticket; a storeroom (the vault) keeps every pair. The ticket has no maths link to the secret. But the storeroom is one target and one bottleneck.

Databolt keeps no storeroom. The key and some maths make the stand-in. So there is one key to guard, not a shelf of secrets.

Left: a secret goes to a storeroom of shelves holding secret and ticket pairs, and a ticket comes back. Right: a secret goes into a box holding a key and a stand-in comes out, with no shelves anywhere. coat-check tool (vault) secret storeroom secret#A1 secret#B7 secret#C2 secret#D9 every pair, stored ticket #A1 one big target, one queue Databolt (no vault) secret key + maths stand-in no list of pairs kept one key to guard, no queue
Left: a vault tool keeps every pair on a shelf. Right: Databolt keeps only the key.

The secrets stay in the company's own cloud account, because the swap happens there before anything is stored.

Databolt installs inside the company's own warehouse account, such as Snowflake. When a secret arrives, the box swaps it. Only the stand-in is stored.

A control desk outside sets the rules; Capital One runs it, or the company does. It sends rules in and logs out, about the swaps and never the numbers. The rule sheet moves; the secret stops at the box.

A dashed boundary labelled your own cloud account holds a Databolt box at the top and a warehouse of teal stand-in rows below it. A red secret arrives inside the boundary and goes into the box; a teal arrow goes from the box into the warehouse. Outside the boundary a control desk sends a rule sheet in and receives logs out. No red arrow crosses the boundary. control desk Capital One, or you rules logs your own cloud account …5570 4444 secret arrives Databolt data warehouse …0254 1962 …4471 8820 only stand-ins stored swap happens inside the line
The dashed line is the company's cloud account. Teal arrows are rules and logs; no secret crosses it.

Only people the rules allow can get a stand-in turned back into the real number.

The rules say who sees what. An analyst gets the stand-in. A support agent gets stars and the last four digits. A fraud investigator, if the rules allow it, gets the real number back from the box.

One stored stand-in on the left fans out to three people. The analyst's screen shows the stand-in, the support agent's screen shows stars and 4444, and the investigator's path passes a badge labelled rules allow before showing the real number. stored stand-in …0254 1962 rules allow analyst …7719 0254 1962 support agent **** **** **** 4444 fraud investigator 4111 2298 5570 4444 the box turns it back only when the rules allow
Three people, three views of one stored stand-in. The badge sits on the investigator's path only.

Other tools do the same job, and the difference is where the swapping box sits.

Databolt is one of twelve partners Snowflake lists for this job. Some keep a vault at the vendor. Some put a scrambling box in your cloud account, next to the warehouse.

The warehouse's own masking draws stars or a one-way jumble that nobody can turn back. Databolt's box can sit inside the warehouse itself.

Four ledger rows, each with a dashed cloud-account boundary holding a warehouse. Vault services: the secret leaves the account for a vault at the vendor. Box in your cloud: the secret leaves the warehouse for a keyed box still inside the account. Warehouse masking: stars inside the warehouse, nothing leaves. Databolt: the keyed box sits inside the warehouse. A comes-back column reads yes, yes, no, yes. tool your cloud account outside comes back? vault services Skyflow a vault yes box in your cloud Protegrity, Thales yes warehouse masking Snowflake **** 4444 nothing leaves no Databolt in the warehouse nothing leaves yes
Each row is one way to hide a secret. A red arrow is the secret leaving the warehouse.

Capital One built the engine in 2018 and ran it on its own data before selling it in 2025.

The bank built the swapping engine in 2018 for itself. At the April 2025 launch, Capital One said the engine was doing more than a hundred billion swaps a month. Hundreds of its programs used it.

By December 2025 it put the count at more than 900. The firm behind Zelle was an early user.

A timeline drawn to scale from 2018 to late 2026 with marks for built inside the bank, sold as Databolt, and file scanning previewed. Below it, a big number reads one hundred billion swaps a month, and a strip of nine squares stands for 900 programs. 2018 built for the bank sold as Databolt Apr 2025 Mar 2026: file scanning previewed 100,000,000,000 swaps a month at launch, inside the bank 900+ programs by December 2025, 100 per square figures are Capital One's own
Top: when it was built and sold. Bottom: how much of it the bank runs on itself.

Databolt replaces a secret with a look-alike that programs and analysts can use, and the box turns it back only for people the rules allow.