Abstract: The disclosed technology relates to managing sensitive information in a network environment. A system is configured to receive first data from a plurality of network entities, identify information relating to the identity of the network entities contained in the first data, extract information identifying the network entities from the first data, store the information identifying the network entities in a first data store, replace the information identifying the network entities in the first data with one or more identifiers to create second data, and storing the second data in a second data store. The system is further configured to locate and retrieve the information identifying the network entities in the first data store using one or more corresponding identifiers.