Managing transmission and storage of sensitive data

A method comprising:

• maintaining, by a network security appliance logically interposed between a plurality of local clients associated with a private network protected by the network security appliance and a plurality of remote servers residing outside of the private network, a database of sensitive data of a plurality of users of the private network;
• and
• facilitating, by the network security appliance, secure submission of sensitive data of a user of the plurality of users in connection with interactions between a local client of the plurality of local clients and a remote server of the plurality of remote servers by:
• intercepting incoming traffic from the remote server to the local client;
• evaluating whether source code contained within the incoming traffic represents a known remote server login form associated with a known website;
• when a result of said evaluating is affirmative, modifying the incoming traffic to cause a modified version of the remote server login form to be presented to the user;
• intercepting outgoing traffic from the local client to the remote server;
• determining whether the outgoing traffic matches a policy of a plurality of policies configured by an administrator of the private network that causes the network security appliance to inject the sensitive data into the outgoing traffic on behalf of the user;
• and
• when said determining is affirmative:
• retrieving the sensitive data from the database;
• modifying the outgoing traffic by injecting the sensitive data into the outgoing traffic to form modified outgoing traffic;
• and
• sending the modified outgoing traffic to the remote server.