Octopize Documentation
website·Indexed 33 days ago
https://docs.octopize.ioDocumentation for Octopize and its Avatar platform, a privacy-preserving solution for data anonymization and synthesis. Includes guides on differentially private synthesis methods (AvatarOpenDP and AvatarFastDP), data processors, and deployment options for SaaS, Docker, and Kubernetes via Helm charts.
What's inside Octopize
- The Avatar Method transforms sensitive personal data into synthetic, anonymized datasets called 'Avatars'. These datasets maintain the exact structure, granularity, and statistical properties of the original data, allowing developers and analysts to use them for secondary purposes without violating privacy regulations like GDPR or the AI Act. Because the resulting data is no longer classified as personal data, it can be used in AI models, analytics, and BI tools without compromising individual privacy.
Overview of the Avatars Anonymization Pipeline
The Avatars anonymization process is divided into three primary stages to ensure data privacy and utility:
- Prepare: Focuses on data formatting, preprocessing rules (file formats, data types, structure), and handling special cases like relational databases or time series to improve output quality.
- Run: Involves configuring anonymization parameters using the Advisor tool and executing the process via either the Web Client (for experimentation) or the Python Client (for ETL integration and advanced control).
- Enhance: Focuses on post-process evaluation, reviewing technical and impact assessment reports, and exporting the final synthetic dataset.
Overview of Avatar Data Augmentation
Avatar data augmentation leverages the stochastic properties of its anonymization method to generate synthetic individuals that preserve the statistical characteristics (distributions, correlations, and multivariate relationships) of the original dataset. It ensures that generated values remain within original data boundaries and inherit the same privacy guarantees as standard avatarization. This capability is compatible with tabular, multi-table, and time series methodologies.Overview of Octopize synthesis methods
Octopize provides three synthesis methods for creating synthetic data. All three share a common four-step preprocessing pipeline: 1. Load & type, 2. Project (into latent space via FAMD), 3. Synthesize (the step that differs by method), and 4. Back-project.
Common parameters for all methods include
ncp,imputation,use_categorical_reduction,exclude_variable_names, andcolumn_weights.Method Comparison:
- Avatar (Standard): Best for general use and time series. Uses KNN in latent space. Controlled by parameter
k. - AvatarOpenDP: Provides formal $\epsilon$-differential privacy ($\epsilon$-DP) on the synthesis step. Based on SmartNoise MST synthesizer. Slower runtime. Does not support time series.
- AvatarFastDP: Fast, DP-flavored synthesis. Not end-to-end DP. Uses Gaussian/GMM/Histogram in latent space. Does not support time series.
Constraint: These methods are mutually exclusive. You must set exactly one of
k,open_dp_epsilon, orfast_dp_epsilon. Setting more than one will raise an error.- Avatar (Standard): Best for general use and time series. Uses KNN in latent space. Controlled by parameter
Handle date and timestamp columns with the Datetime Processor
The Datetime Processor automatically manages temporal variables to ensure they can be used for projections through a three-step process:
- Preprocess: Converts dates and timestamps into Unix timestamps (seconds since epoch).
- Anonymize: Performs anonymization using the numeric timestamps.
- Postprocess: Restores the timestamps back to the original
YYYY-MM-DDformat.
Understand the Distance To Closest privacy metric
The Distance To Closest metric measures the median Euclidean distance between an individual in the original dataset and the closest synthetic avatar. It evaluates how close synthetic data lies to the original distribution without relying on direct one-to-one links.
To ensure interpretability, Octopize uses a reference-based approach comparing three sets of data:
- WO (Working Half Original): The part of the original data being anonymized.
- WA (Working Avatars): The synthetic avatars generated from WO.
- HO (Holdout Half Original): A separate, untouched sample of real records used as a baseline for natural variability.
For datasets with $\ge 500$ rows, a real holdout is used; smaller datasets use an approximate holdout created by random splitting during metric computation.
Send a welcome or recovery email to a new user
Since manually created users do not have passwords, you must send a recovery link to allow them to set one.
- Navigate to the user's profile page from the group's Users list.
- In the Overview tab, find the Recovery section and click Email recovery link.
- In the Email stage dropdown, you must select
avatar-recovery-emailto send the correct template.
Evaluate synthetic data for privacy and utility
Synthetic anonymous data generation requires a balance between replicating the characteristics of original training data (utility) and protecting the privacy of individuals. To ensure optimal quality, synthetic datasets must be quantified using objective metrics across two primary dimensions: Privacy and Utility. These metrics verify that the data retains analytical value comparable to the original dataset while meeting privacy protection criteria.Manage Avatar users via Authentik
Avatar users are managed exclusively through Authentik; there is no separate internal user store for the platform. User management and admin access recovery are handled within the Authentik administration interface.Understand Personal Information under PIPEDA
Under Part 1, Section 2(1) of the Personal Information Protection and Electronic Documents Act (PIPEDA), Personal Information is defined as "Information about an identifiable individual." The Office of the Privacy Commissioner of Canada (OPC) interprets this to mean there is a serious possibility that an individual could be identified using the information, either alone or in combination with other data.Choose an Octopize Avatar deployment method
Octopize Avatar software can be deployed using one of two methods: as a SaaS (Software-as-a-Service) hosted on Octopize infrastructure, or self-hosted on your own infrastructure using Docker or Kubernetes. Regardless of the deployment method chosen, users have access to both the web client and the Python client.Learn the Avatar anonymization method
To independently master the Avatar anonymization method, follow this structured learning sequence:
- General Introduction: Start with the Overview and keep the FAQ handy.
- Legal Context: Review the Legal & Compliance Overview to understand data protection laws and compliance frameworks.
- Technical Explanation (Optional): Explore the inner workings of the tool via the 'How the Method Works' documentation.
- Simple Use Case: Follow the Quickstart Tutorial for a walkthrough of the anonymization pipeline on a basic dataset.
- Evaluating Data Quality: Learn to measure the success of anonymization using Privacy and Utility metrics.
- Theoretical Application: Understand the conceptual use cases for when and why to use Avatar.
- Practical Application: Use the Step-by-Step User Guide to apply the method to your own data.