Compound platform for maintaining secure data

A data security system, comprising:

• a hardware memory;
• and a hardware processor coupled to the hardware memory and configured to provide a data security service that decrypts encrypted private data for a third party domain, including:
• a middle security layer configured to receive queries from a remote application controlled by the third party domain, wherein in response to a query involving specified encrypted private data, the middle security layer processes the query, obtains decrypted private data and returns a token to the remote application;
• a root security layer configured to receive a data decryption request from the middle security layer, perform data decryption to obtain the specified encrypted private data using a compound key, and return decrypted private data to the middle security layer;
• a security infrastructure for pre-establishing an encrypted channel between the remote application and the root security layer;
• and
• wherein the data decryption performed by the root security layer includes:
• receiving a middleware key via the encrypted channel from the application;
• hashing the middleware key to create a middleware key hash;
• decrypting an encrypted root key stored in the root security layer with the middleware key hash to generate a root key;
• and
• creating a compound key from the middleware key and root key to perform the data decryption.