CipherStash announces first-class support for Prisma 8 RC1, enabling searchable field-level encryption in Prisma applications. Unlike standard encryption at rest, this approach encrypts individual fields before they reach the database while still supporting equality lookups, free-text search, range queries, and sorting on encrypted data. The integration uses a contract-first workflow where encrypted column types are declared in the Prisma schema, and queries are encrypted client-side before reaching PostgreSQL. Key management is identity-based, tying decryption to the requesting user's identity token via providers like Clerk or Auth0. Explicit decryption is required in application code, preventing plaintext from leaking into logs or API responses. The post also introduces the concept of Data Level Access Control (DLAC), where access is enforced cryptographically at the data level rather than at the application perimeter.
