Abstract: A data security framework can be designed that allows separation of sensitive values from non-sensitive values while substituting obfuscation values for the sensitive values in a document that originally contained both. The data security framework detects a document/form being submitted to a server and determines those values of the document that are sensitive or confidential. The data security framework redacts the document to protect the sensitive values. The data security framework redacts the document by substituting the sensitive values in the document with obfuscation values. The data security framework stores the document or the values of the document (i.e., payload) with the substitute obfuscation values. The data security framework stores the sensitive values in a secure repository distinct from the repository in which the payload or document is stored.