Data privacy vaults centralize and isolate sensitive structured data such as personally identifiable information, payment card details, and protected health information in a dedicated security perimeter, replacing original values with tokens that flow safely through applications, analytics pipelines, and data warehouses. When authorized systems need the actual sensitive value, the vault detokenizes it on demand under policy enforcement, eliminating the need to replicate or encrypt sensitive data across every downstream environment. The category encompasses three principal modalities: API-first privacy vaults that store and tokenize arbitrary sensitive fields, payment tokenization services and proxy gateways purpose-built for PCI compliance, and vaultless tokenization systems that apply format-preserving encryption without central storage. Adoption has accelerated as privacy regulations proliferated and enterprises consolidated their data governance architecture around detokenization policy rather than perimeter defense.