Security, auth & multi-tenancyHardSDE-3

Your lending app stores PAN and Aadhaar numbers. Security wants them encrypted at field level so a database dump is useless, but operations still need to look up a customer by PAN. Also, under the DPDP Act you must be able to erase a user's data. How do you design this?

Asked at

GrowwPaytmPolicyBazaarRazorpay

Think first

Answer out loud as you would in the room — clarify, give numbers, name the trade-off — then compare with the model answer.

Go deeper

Saved on this device. Create a free account to keep it on every device.

Practise this with Sam

A real mock interview, out loud, with an honest scorecard. Free to start.