Computer-implemented method for configuring a second computer to store data in a data-storage structure being implemented as a database (152-A), wherein the data (D1, D2) originates from a first computer that is communicatively connected to the second computer , and wherein the data (D1, D2) is processed by an application in the second computer , such that the application processes data (D1) received from the first computer and provides processed data (D2) to be stored in the data-storage structure (152, 152-A), the method comprising: deploying an infrastructure to the second computer , the infrastructure (192-2) with a forwarder module - to store data - adapted to receive data (D2) from the application and adapted to identify a data portion (P) of the received data (D2), wherein the data portion (P) is to be encrypted, and adapted to forward an encrypted data portion (P*) to the data-storage structure (152, 152-A), the forwarder module - to retrieve data - adapted to read a further encrypted data portion (P*) from the data-storage structure (152, 152-A), wherein the further encrypted data portion (P*) is to be decrypted, a crypto module adapted to encrypt the data portion (P) with a key (KY) and adapted to decrypt the further encrypted data portion (P*) with the key (KY), and a key control module adapted to generate and to store the key (KY); wherein the deploying step includes that code for the function of the forwarder module , the crypto module , and the key control module is imported from outside the second computer and that the code is made available to the processor of the second computer for execution; and providing the key into the key control module upon receiving a key trigger (KT) from the first computer . deploying an infrastructure to the second computer , the infrastructure (192-2) with a forwarder module - to store data - adapted to receive data (D2) from the application and adapted to identify a data portion (P) of the received data (D2), wherein the data portion (P) is to be encrypted, and adapted to forward an encrypted data portion (P*) to the data-storage structure (152, 152-A), the forwarder module - to retrieve data - adapted to read a further encrypted data portion (P*) from the data-storage structure (152, 152-A), wherein the further encrypted data portion (P*) is to be decrypted, a crypto module adapted to encrypt the data portion (P) with a key (KY) and adapted to decrypt the further encrypted data portion (P*) with the key (KY), and a key control module adapted to generate and to store the key (KY); a forwarder module - to store data - adapted to receive data (D2) from the application and adapted to identify a data portion (P) of the received data (D2), wherein the data portion (P) is to be encrypted, and adapted to forward an encrypted data portion (P*) to the data-storage structure (152, 152-A), the forwarder module - to retrieve data - adapted to read a further encrypted data portion (P*) from the data-storage structure (152, 152-A), wherein the further encrypted data portion (P*) is to be decrypted, a crypto module adapted to encrypt the data portion (P) with a key (KY) and adapted to decrypt the further encrypted data portion (P*) with the key (KY), and a key control module adapted to generate and to store the key (KY); wherein the deploying step includes that code for the function of the forwarder module , the crypto module , and the key control module is imported from outside the second computer and that the code is made available to the processor of the second computer for execution; and providing the key into the key control module upon receiving a key trigger (KT) from the first computer . <EOS>