A computer-based method for providing bundled services to a client application in a service call to a services platform in a service provider computer system via a service API , said method comprising: receiving, from the client application via the service API , a message defining an API service request for encryption services, the message comprising at least a parameter portion and a payload portion, the parameter portion comprising parameters relating to the type of encryption or the encryption strength, and the payload portion comprising data including information to be encrypted; determining at a gateway system an identity of the client application transmitting the received message using identity information that has been established within the service provider computer system ; authenticating the client application using the parameters received in the API service request; providing , by the services platform via the service API and a crypto provider , encryption services for encryption of the data contained in the payload portion using the parameters received in the parameter portion; managing key material for security of the data wherein managing key material comprises associating, by a key management services module of the service API , a unique encryption key to the client application , wherein the encryption key is used by the crypto provider to encrypt the data received from the client application ; transmitting , via the service API , the encrypted data back to the client application , the encrypted data being stored by the client application until needed; receiving, from the client application via the service API , a message defining an API service request for decryption services, the message comprising the stored encrypted data; providing , by the services platform via the service API and the crypto provider , decryption services for decryption of the encrypted data received from the client application ; and transmitting , via the service API , the decrypted data back to the client application . receiving, from the client application via the service API , a message defining an API service request for encryption services, the message comprising at least a parameter portion and a payload portion, the parameter portion comprising parameters relating to the type of encryption or the encryption strength, and the payload portion comprising data including information to be encrypted; determining at a gateway system an identity of the client application transmitting the received message using identity information that has been established within the service provider computer system ; authenticating the client application using the parameters received in the API service request; providing , by the services platform via the service API and a crypto provider , encryption services for encryption of the data contained in the payload portion using the parameters received in the parameter portion; managing key material for security of the data wherein managing key material comprises associating, by a key management services module of the service API , a unique encryption key to the client application , wherein the encryption key is used by the crypto provider to encrypt the data received from the client application ; transmitting , via the service API , the encrypted data back to the client application , the encrypted data being stored by the client application until needed; receiving, from the client application via the service API , a message defining an API service request for decryption services, the message comprising the stored encrypted data; providing , by the services platform via the service API and the crypto provider , decryption services for decryption of the encrypted data received from the client application ; and transmitting , via the service API , the decrypted data back to the client application . <EOS>