Application-layer data protection software that automates enforcement of data protection policies and orchestrates centralized cryptographic key management at the application level. Provides encryption, tokenization, pseudonymization/anonymization and data masking, access controls, audit logging and alerts for enterprise and financial-institution compliance.