As all commercial IoT solutions store a lot of data in a cloud environment, this sensitive data needs to be protected. This talk will explore how data can be secured using encryption and/or tokenisation. Protecting sensitive data is especially important considering recent data breaches. Data in an IoT cloud environment can be effectively protected through encryption. An “Encrypt Everything” approach to the protection of personal and sensitive data can help ensure that compliance mandates such as the new GDPR (General Data Protection Regulation) are met.