You may have applications that process sensitive data such as credit card transactions, SSN, therefore what if a PCI auditor discovered that the payment processing gateway was storing clear-text credit card numbers in the database, which increases the risk of a major data breach and is a violation of the PCI standard. More and more organizations have to meet the regulations requirements such as the DSS, GDPR, HIPAA.

Because of these reasons, personas and decision makers responsible for data protection face several challenges :

• None of the developers on the team are cryptography experts, they want to have more flexibility to change the code when it comes to data encryption.
• The security teams must ensure that the infrastructure is compliant with regulations.
• The CTO and managers are more concerned about the costs, the productivity. They are responsible for time to market so they have to make sure the developers team use the appropriate tools.