A computer-based method for providing bundled services to a client application in a service call to a services platform in a service provider computer system via a service API, said method comprising: receiving, from the client application via the service API, a message defining an API service request for encryption services, the message comprising at least a parameter portion and a payload portion, the parameter portion comprising parameters relating to the type of encryption or the encryption strength, and the payload portion comprising data including information to be encrypted; determining at a gateway system an identity of the client application transmitting the received message using identity information that has been established within the service provider computer system; authenticating the client application using the parameters received in the API service request; providing, by the services platform via the service API and a crypto provider, encryption services for encryption of the data contained in the payload portion using the parameters received in the parameter portion; managing key material for security of the data wherein managing key material comprises associating, by a key management services module of the service API, a unique encryption key to the client application, wherein the encryption key is used by the crypto provider to encrypt the data received from the client application; transmitting, via the service API, the encrypted data back to the client application (618, 622), the encrypted data being stored by the client application until needed; receiving, from the client application via the service API, a message defining an API service request for decryption services, the message comprising the stored encrypted data; providing, by the services platform via the service API and the crypto provider, decryption services for decryption of the encrypted data received from the client application; and transmitting, via the service API, the decrypted data back to the client application. receiving, from the client application via the service API, a message defining an API service request for encryption services, the message comprising at least a parameter portion and a payload portion, the parameter portion comprising parameters relating to the type of encryption or the encryption strength, and the payload portion comprising data including information to be encrypted; determining at a gateway system an identity of the client application transmitting the received message using identity information that has been established within the service provider computer system; authenticating the client application using the parameters received in the API service request; providing, by the services platform via the service API and a crypto provider, encryption services for encryption of the data contained in the payload portion using the parameters received in the parameter portion; managing key material for security of the data wherein managing key material comprises associating, by a key management services module of the service API, a unique encryption key to the client application, wherein the encryption key is used by the crypto provider to encrypt the data received from the client application; transmitting, via the service API, the encrypted data back to the client application (618, 622), the encrypted data being stored by the client application until needed; receiving, from the client application via the service API, a message defining an API service request for decryption services, the message comprising the stored encrypted data; providing, by the services platform via the service API and the crypto provider, decryption services for decryption of the encrypted data received from the client application; and transmitting, via the service API, the decrypted data back to the client application.