Sammati Vault review
A self-hosted token vault with approval-gated access and per-person erasure.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Sammati Vault replaces personal data in an organization's systems with reversible tokens that retain the original values' shape. It is aimed at mid-market and enterprise teams that need controlled access to sensitive fields, approval workflows, and per-person erasure. The product runs in a customer's cloud account or data centre, and applications and people request access through its controlled boundary. Go, Python, and TypeScript client libraries are available alongside a plain HTTP API.
Access controls are a central part of the product. Role- and field-level permissions determine whether a request returns a token, a masked value, or the real value. Sensitive reads can require approval by another person; bulk record access can require two approvers, and emergency access can be time-boxed. Approved and refused requests are recorded in an audit trail. For lookup and joins, deterministic fingerprints let teams match records without decrypting the original value. These controls may suit teams balancing operational data access with limits on who can see identifiable values.
Erasure is handled by destroying the encryption key for a person, while the deployment model keeps the vault in the customer's cloud or data centre rather than a hosted SaaS service. That makes deployment ownership and operational fit worth weighing alongside the access controls. The vendor quotes pricing per deployment, so buyers should expect a sales conversation rather than a self-service plan selection. OpenBao and Postgres are the named integrations. Sammati Vault is a fit for organizations that need approval-gated access, shape-retaining tokens, and key-based erasure; teams seeking hosted SaaS or a broader named integration set should consider alternatives.
Sammati Vault pros and cons
- Where it wins
- Preserves source-value shape and supports deterministic lookup and joins.
- Controls access by role and field, with approvals for sensitive actions.
- Supports per-person erasure by destroying that person's encryption key.
- Where it doesn't
- Requires a quoted, per-deployment price rather than self-service purchasing.
- Runs in a customer cloud account or data centre, not as hosted SaaS.
- Named integrations are limited to OpenBao and Postgres.
Sammati Vault fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update