Baffle protects, controls cloud-native data through record-level encryption