Baffle Data Protection vs Confidencial

Baffle Data Protection has no write-up on Specifiction yet; its figures are above.

Confidencial protects sensitive information at field, paragraph, or cell level while keeping controls attached to the data. Selective encryption can leave ordinary document content readable while protecting designated fields. Discover scans environments and classifies sensitive fields across more than 40 file types. Shield applies policy-based encryption, tokenization, redaction, deletion, or archiving. AI Guard protects retrieval-augmented generation, fine-tuning, and long-context workflows through sensitive-field tokenization and output filtering. Exchange handles sending, requesting, and signing protected files with access policies, activity tracking, and revocation. Transfers support up to 1 TB per send and more than 40 file types; external recipients can use a limited portal without accounts or installation at no cost. Deployment may be hosted, hybrid, or self-hosted, including cloud, on-premises, and air-gapped environments. Keys remain in the customer’s key-management service, including AWS KMS and Azure Key Vault.