Sensitive Data in EventStore

EventStoreDB
1

Hi

in one scenario we have some kind of online shop functionality.

the user can buy something with a credit card. Now we promise our users that the creditcard information will be deleted from our system after the payment has been fullfilled

Now when implementing this in EventStore, what would be a good way? Should I avoid the EventSourcing for this part ? I can image that the payment step could be handled in a CRUD manner.

Or should i do the really really bad thing and update / delete the related events ?

Is there somekind of best practice?

2

You can delete information....

See delete stream if the event is in its own stream you can just
delete that stream.

Another common strategy is to encrypt that information in the event
(e.g. only some is encrypted) and lose the key which is acceptable for
many such situations though it depends on the particular regulations
you are trying to meet.

Cheers,

Greg

3

More discussion http://codebetter.com/gregyoung/2013/05/28/why-cant-i-update-an-event/