Techbytes: Scalable User Privacy – Crypto Shredding at Spotify
Sep 1, 2019Spotify Engineering

Summary
This post introduces 'crypto-shredding' as a technique for scalable user privacy within Spotify's data management. It explains how this method, implemented via the internal data encryption service 'Padlock,' allows for the secure and efficient deletion of user data by encrypting it with a unique key and then securely shredding that key. This approach ensures that even if the underlying data remains, it becomes inaccessible, thus respecting user privacy requests at scale.
More from the Vulnerability Management Platform trail
- Spotify’s Vulnerability Management Platform
- How We Maintain Security Testing within the Software Development Life Cycle
- Reflections on the Last Two Years of Spotify’s Bug Bounty Program
- Painting a Picture of Your Infrastructure in Minutes
- Releasing Gimme: Managing time bound IAM conditions in Google Cloud Platform