Security application for data security formatting, tagging and control

A system for formatting data records based on security rules, the system comprising:

• a computer and a storage accessible by said computer, the storage having a plurality of data records stored thereon in a first format, the first format associated with an application, wherein each of the plurality of data records is a file such that the file is formatted in the first format;
• a security application executing on said computer and intercepting disk input and output (I/O) operations between said computer and said storage;
• said security application identifying a content of a data record of said plurality of data records based on a content identifier associated with one or more of:
• a keyword, a user identifier and a device identifier;
• said security application tagging said data record with a tag based on the content identifier and a security rule, the security rule indicative of permissions or restrictions or combinations thereof associated with access to the data record based on the content identifier;
• wherein said data record includes at least two sections, a first section contains the tag and a second section contains the content of the data record, said security application converting the second section of the data record to a second format wherein when in the second format, the second section is not accessible by the application, such that the data record in the second format is the content thereof in the second format in its entirety;
• the data record is stored on said storage in the second format such that when said security application intercepts a disk operation to access the data record via the application, said security application compares the tag to the security rule and converts the data record to the first format if the disk operation complies with the security rule based on the tag, such that the data record is accessible as the file formatted in the first format;
• wherein the tag is accessible from the first section of said data record when said second section is in the second format.