A method of storing data

A method of securely storing a data record from a client application in a database, wherein the data record comprises a plurality of data fields. Receiving the data record from the client application 201, performing application-level encryption of the data record 202 and receiving an encryption policy associated with the client application that defines one or more data fields within the data record that are to be hashed 203. Hashing the or each data field of the data record 204 and storing the one or more hashed data fields and the encrypted data record in the database as a combined record 205. There is also provided a method of searching securely stored data records, a method of updating a database with securely stored data records, a method of performing key rotation from a first encryption key to a second encryption key in a database with securely stored data records, a method of performing key rotation from a first hash key to a second hash key in a database with securely stored data records and a method of looking up a securely stored data record.