A method of secure storage and processing of digital information, provided as source data for a specified user, the method comprising the steps of: (a) creating and storing, according to applicable storage estate separation rules, in a digital storage estate of multiple logically and physically separate storage locations, a primary, and at least one backup digital catalogue containing user identification information and source data metadata for verification of the user's authorisation to access and manipulate the source data; (b) calculating, according to the size, SDbyte, of the source data and a minimum integer fragment size, MFbyte, an upper limit, ULIM, to the number of possible fragments into which the source data is split; (c) splitting the source data into an integer number, NFRAG, of fragments, each of which is also a random number of bytes in size greater or equal to the minimum number of bytes that can form a fragment, with the sum of the bytes of the fragments at least equalling the number of bytes in the source data; (d) naming, or tagging, each fragment in a manner which prevents association of fragments with one another or the Source Data; (e) mapping the named fragments to one another in such a manner that allows for recombination; (f) generating a separate key for each fragment; the method being characterised by: (g) naming each key in a manner which prevents association of the key with any other key or any fragment; (h) encrypting each fragment with its respective key; (i) cataloguing the relationships between fragments, their keys, and the recombination mapping; (j) duplicating, one or more times, each encrypted fragment, each key, the mapping and the catalogue; (k) allocating, according to applicable storage estate separation rules, in the digital storage estate of multiple logically and physically separate storage locations, a primary, and at least one backup storage location for fragments, the mapping and keys; updating the catalogue with the relevant identifiers and the relationships between the fragments and keys and their distributed storage locations. (a) creating and storing, according to applicable storage estate separation rules, in a digital storage estate of multiple logically and physically separate storage locations, a primary, and at least one backup digital catalogue containing user identification information and source data metadata for verification of the user's authorisation to access and manipulate the source data; (b) calculating, according to the size, SDbyte, of the source data and a minimum integer fragment size, MFbyte, an upper limit, ULIM, to the number of possible fragments into which the source data is split; (c) splitting the source data into an integer number, NFRAG, of fragments, each of which is also a random number of bytes in size greater or equal to the minimum number of bytes that can form a fragment, with the sum of the bytes of the fragments at least equalling the number of bytes in the source data; (d) naming, or tagging, each fragment in a manner which prevents association of fragments with one another or the Source Data; (e) mapping the named fragments to one another in such a manner that allows for recombination; (f) generating a separate key for each fragment; (g) naming each key in a manner which prevents association of the key with any other key or any fragment; (h) encrypting each fragment with its respective key; (i) cataloguing the relationships between fragments, their keys, and the recombination mapping; (j) duplicating, one or more times, each encrypted fragment, each key, the mapping and the catalogue; (k) allocating, according to applicable storage estate separation rules, in the digital storage estate of multiple logically and physically separate storage locations, a primary, and at least one backup storage location for fragments, the mapping and keys; updating the catalogue with the relevant identifiers and the relationships between the fragments and keys and their distributed storage locations.