Computer-implemented method for configuring a second computer to store data in a data-storage structure being implemented as a database (152-A), wherein the data (D1, D2) originates from a first computer that is communicatively connected to the second computer, and wherein the data (D1, D2) is processed by an application in the second computer, such that the application processes data received from the first computer and provides processed data to be stored in the data-storage structure (152, 152-A), the method comprising: deploying an infrastructure to the second computer, the infrastructure with a forwarder module - to store data - adapted to receive data from the application and adapted to identify a data portion of the received data, wherein the data portion is to be encrypted, and adapted to forward an encrypted data portion (P*) to the data-storage structure (152, 152-A), the forwarder module - to retrieve data - adapted to read a further encrypted data portion (P*) from the data-storage structure (152, 152-A), wherein the further encrypted data portion (P*) is to be decrypted, a crypto module adapted to encrypt the data portion with a key and adapted to decrypt the further encrypted data portion (P*) with the key, and a key control module adapted to generate and to store the key; wherein the deploying step includes that code for the function of the forwarder module, the crypto module, and the key control module is imported from outside the second computer and that the code is made available to the processor of the second computer for execution; and providing the key into the key control module upon receiving a key trigger from the first computer. deploying an infrastructure to the second computer, the infrastructure with a forwarder module - to store data - adapted to receive data from the application and adapted to identify a data portion of the received data, wherein the data portion is to be encrypted, and adapted to forward an encrypted data portion (P*) to the data-storage structure (152, 152-A), the forwarder module - to retrieve data - adapted to read a further encrypted data portion (P*) from the data-storage structure (152, 152-A), wherein the further encrypted data portion (P*) is to be decrypted, a crypto module adapted to encrypt the data portion with a key and adapted to decrypt the further encrypted data portion (P*) with the key, and a key control module adapted to generate and to store the key; a forwarder module - to store data - adapted to receive data from the application and adapted to identify a data portion of the received data, wherein the data portion is to be encrypted, and adapted to forward an encrypted data portion (P*) to the data-storage structure (152, 152-A), the forwarder module - to retrieve data - adapted to read a further encrypted data portion (P*) from the data-storage structure (152, 152-A), wherein the further encrypted data portion (P*) is to be decrypted, a crypto module adapted to encrypt the data portion with a key and adapted to decrypt the further encrypted data portion (P*) with the key, and a key control module adapted to generate and to store the key; wherein the deploying step includes that code for the function of the forwarder module, the crypto module, and the key control module is imported from outside the second computer and that the code is made available to the processor of the second computer for execution; and providing the key into the key control module upon receiving a key trigger from the first computer.