My team is outsourcing some of its IT management, including the administrative role.
Since our income is based on data we store in the DB, I would like to avoid sharing access to it with the untrusted team abroad.
My resolution for this issue is to create separate encryption micro-service, managed by a trusted core person, which will encrypt the sensitive data.
The problems I can see with such solution are:
- External encryption over the network might significantly slow down each process.
- Separated server might crash and decrease uptime of the service since there is no dedicated IT manager.
- High traffic might be limited and reduce core service functionality.
My question is, is there a better solution for such a problem? Are there any 3rd party trusted services might help me find solution?