A computing device may be configured to provide operations related to providing additional security for sensitive personal information (SPI) in data records of an enterprise. The SPI is extract from the data records and mask sequence values associated with the SPI are generated. A master translation table is updated with the association of the mask sequence values to the entries of SPI and the mask sequence values are merged into the data records to be used in place of the SPI to safeguard the SPI. The table containing the mask sequence values is stored separately.