The process of replacing sensitive data elements with non-sensitive substitutes called tokens, which have no exploitable value and can be mapped back to the original data through a secure vault.