A system to provide access to protected data associated with an interactive customer application for a communication terminal, comprising: a first server coupled to a publisher database, wherein the publisher database is configured to store the protected data in encrypted form; a second server coupled to the first server, the second server configured to provide a cryptographically strong authentication of access to the protected data, wherein purported credentials are provided by the communication terminal to the second server in order to authenticate the purported credentials and if the purported credentials are authenticated access is granted between an application container of the communication terminal and the protected data; a first interface for communicably coupling the first server and the communication terminal; and a second interface for communicably coupling between the first server and the customer application hosted by the second server, wherein the first server is configured to exchange the protected data with the application container of the communication terminal via the first interface, and to exchange the protected data with the customer application via the second interface; wherein the first server comprise a queue in order to queue notifications when the customer application is offline, the notifications corresponding to changes in the protected data, wherein the first server is further configured to deliver the notifications from the queue to the customer application when the customer application is back online; wherein the application container comprises a mobile application hosted by a client, the mobile application configured to host and support a plurality of application configurations providing end-to-end security of the protected data. a first server coupled to a publisher database, wherein the publisher database is configured to store the protected data in encrypted form; a second server coupled to the first server, the second server configured to provide a cryptographically strong authentication of access to the protected data, wherein purported credentials are provided by the communication terminal to the second server in order to authenticate the purported credentials and if the purported credentials are authenticated access is granted between an application container of the communication terminal and the protected data; a first interface for communicably coupling the first server and the communication terminal; and a second interface for communicably coupling between the first server and the customer application hosted by the second server, wherein the first server is configured to exchange the protected data with the application container of the communication terminal via the first interface, and to exchange the protected data with the customer application via the second interface; wherein the first server comprise a queue in order to queue notifications when the customer application is offline, the notifications corresponding to changes in the protected data, wherein the first server is further configured to deliver the notifications from the queue to the customer application when the customer application is back online; wherein the application container comprises a mobile application hosted by a client, the mobile application configured to host and support a plurality of application configurations providing end-to-end security of the protected data.