A computing device (140, 150, 112, 240, 340, 440, 450, 610) of a cloud database platform, the computing device comprising: a physical enclosure; at least one processor disposed within the enclosure, the at least one processor being adapted to execute queries on a cloud database (142, 152), wherein the cloud database (142, 152) stores data partially as clear text data and partially as encrypted data; a network interface (270, 344, 370, 444, 470, 670) disposed within the enclosure, the network interface (270, 344, 370, 444, 470, 670) being adapted to provide an interface to a network (120, 671, 673) and comprising security circuitry, the security circuitry comprising: a decryption component (274, 374, 380, 474) and a query splitting component adapted to: receive an encrypted query over the network (120, 671, 673), the encrypted query being received from a device of a subscriber to the cloud computing service, process the encrypted query to generate a processed query, the processing comprising decrypting the query with a key (114, 46, 246, 346, 446) that is complementary to a key (114, 46, 246, 346, 446) at the device of the subscriber and splitting the query such that portions of the decrypted query are processed on the clear text data while other portions are applied to the encrypted data, a combining component adapted to: combine results of processing portions of the split query, and; an encryption component adapted to: encrypt the combined results, and transmit the encrypted results over the network (120, 671, 673) directed to the device of the subscriber wherein: the security circuitry further comprises a query translation component adapted to generate a translated query by performing a translation on the decrypted query; and the translated query is provided as the decrypted query for execution by the at least one processor; the security circuitry further comprises an aggregation component adapted to: decrypt a result of the query; and perform an aggregation function on the decrypted result to produce an aggregated result; and the aggregated result is provided to the encryption component as the result of the decrypted query. a physical enclosure; at least one processor disposed within the enclosure, the at least one processor being adapted to execute queries on a cloud database (142, 152), wherein the cloud database (142, 152) stores data partially as clear text data and partially as encrypted data; a network interface (270, 344, 370, 444, 470, 670) disposed within the enclosure, the network interface (270, 344, 370, 444, 470, 670) being adapted to provide an interface to a network (120, 671, 673) and comprising security circuitry, the security circuitry comprising: a decryption component (274, 374, 380, 474) and a query splitting component adapted to: receive an encrypted query over the network (120, 671, 673), the encrypted query being received from a device of a subscriber to the cloud computing service, process the encrypted query to generate a processed query, the processing comprising decrypting the query with a key (114, 46, 246, 346, 446) that is complementary to a key (114, 46, 246, 346, 446) at the device of the subscriber and splitting the query such that portions of the decrypted query are processed on the clear text data while other portions are applied to the encrypted data, a combining component adapted to: combine results of processing portions of the split query, and; an encryption component adapted to: encrypt the combined results, and a decryption component (274, 374, 380, 474) and a query splitting component adapted to: receive an encrypted query over the network (120, 671, 673), the encrypted query being received from a device of a subscriber to the cloud computing service, process the encrypted query to generate a processed query, the processing comprising decrypting the query with a key (114, 46, 246, 346, 446) that is complementary to a key (114, 46, 246, 346, 446) at the device of the subscriber and splitting the query such that portions of the decrypted query are processed on the clear text data while other portions are applied to the encrypted data, a combining component adapted to: combine results of processing portions of the split query, and; receive an encrypted query over the network (120, 671, 673), the encrypted query being received from a device of a subscriber to the cloud computing service, process the encrypted query to generate a processed query, the processing comprising decrypting the query with a key (114, 46, 246, 346, 446) that is complementary to a key (114, 46, 246, 346, 446) at the device of the subscriber and splitting the query such that portions of the decrypted query are processed on the clear text data while other portions are applied to the encrypted data, a combining component adapted to: combine results of processing portions of the split query, and; combine results of processing portions of the split query, and; an encryption component adapted to: encrypt the combined results, and encrypt the combined results, and the security circuitry further comprises a query translation component adapted to generate a translated query by performing a translation on the decrypted query; and the translated query is provided as the decrypted query for execution by the at least one processor; the security circuitry further comprises an aggregation component adapted to: decrypt a result of the query; and perform an aggregation function on the decrypted result to produce an aggregated result; and decrypt a result of the query; and perform an aggregation function on the decrypted result to produce an aggregated result; and