A system for tokenizing sensitive data, comprising: a node (132, 134, 136, 200) comprising a main memory, a randomization service, and a tokenization service; a processor; and a computer-readable storage medium comprising instructions that upon execution by the processor cause the system to perform operations, the operations comprising: identifying an epoch as a current epoch based on a current system time of the node, the epoch defined by an associated start time and a duration, whereby the duration is defined by the associated start time and a start time of a further epoch following the epoch, referred to as new epoch; computing, by the node (132, 134, 136, 200), a seed value based on the associated start time of the epoch and a secret; generating, by the randomization service, a plurality of ephemeral tokens for a set of sensitive data based on the seed value, each ephemeral token having a usable life defined by the epoch; associating each sensitive data instance in the set of sensitive data with a particular ephemeral token of the plurality of ephemeral tokens to create a mapping structure in the main memory; and configuring the tokenization service to process tokenization requests, received during the duration of the current epoch, using the mapping structure, wherein the node (132, 134, 136, 200) is one of a plurality of nodes composing the system, and wherein each of the plurality of nodes is configured to independently create the mapping structure without synchronizing with other nodes (132, 134, 136, 200) among the plurality of nodes. a node (132, 134, 136, 200) comprising a main memory, a randomization service, and a tokenization service; a processor; and a computer-readable storage medium comprising instructions that upon execution by the processor cause the system to perform operations, the operations comprising: identifying an epoch as a current epoch based on a current system time of the node, the epoch defined by an associated start time and a duration, whereby the duration is defined by the associated start time and a start time of a further epoch following the epoch, referred to as new epoch; computing, by the node (132, 134, 136, 200), a seed value based on the associated start time of the epoch and a secret; generating, by the randomization service, a plurality of ephemeral tokens for a set of sensitive data based on the seed value, each ephemeral token having a usable life defined by the epoch; associating each sensitive data instance in the set of sensitive data with a particular ephemeral token of the plurality of ephemeral tokens to create a mapping structure in the main memory; and configuring the tokenization service to process tokenization requests, received during the duration of the current epoch, using the mapping structure, wherein the node (132, 134, 136, 200) is one of a plurality of nodes composing the system, and wherein each of the plurality of nodes is configured to independently create the mapping structure without synchronizing with other nodes (132, 134, 136, 200) among the plurality of nodes. identifying an epoch as a current epoch based on a current system time of the node, the epoch defined by an associated start time and a duration, whereby the duration is defined by the associated start time and a start time of a further epoch following the epoch, referred to as new epoch; computing, by the node (132, 134, 136, 200), a seed value based on the associated start time of the epoch and a secret; generating, by the randomization service, a plurality of ephemeral tokens for a set of sensitive data based on the seed value, each ephemeral token having a usable life defined by the epoch; associating each sensitive data instance in the set of sensitive data with a particular ephemeral token of the plurality of ephemeral tokens to create a mapping structure in the main memory; and configuring the tokenization service to process tokenization requests, received during the duration of the current epoch, using the mapping structure, wherein the node (132, 134, 136, 200) is one of a plurality of nodes composing the system, and wherein each of the plurality of nodes is configured to independently create the mapping structure without synchronizing with other nodes (132, 134, 136, 200) among the plurality of nodes.