Making the cloud prove it followed your privacy wishes

GDPRuler is a research prototype that enforces GDPR-style privacy policies on unmodified key-value databases by mediating database operations inside a Confidential Virtual Machine (AMD SEV-SNP, Intel TDX, ARM CCA). It attaches compliance metadata to records, performs runtime policy checks, produces tamper-evident audit logs retrievable by authorized regulators, and was formally analyzed for log integrity; the prototype shows moderate performance overheads and defined limitations (no rollback protection for underlying DB, excluded side-channels/DoS, omitted range queries).