The problem
Handling sensitive payment and identity data at scale brings strict security obligations. The system needed to protect that data end to end and keep it usable at scale, without the protection step becoming a bottleneck in the transaction flow.
What I built
I designed and built an enterprise tokenization service that replaces sensitive values with non-sensitive tokens, backed by a hardware security module (HSM) so that encryption keys never leave secure hardware. The service exposes a FastAPI interface for tokenize and detokenize operations, integrates with Thales HSM infrastructure, and is engineered to hold throughput steady under sustained load.
Key focus areas were correctness under concurrency, careful key-management boundaries, and keeping latency low enough that the tokenization step stayed invisible inside the wider transaction flow.
Outcome
The service tokenized sensitive data at scale with encryption keys held inside secure Thales hardware — protecting the data without becoming a drag on the transactions flowing through it.