Every organization needs comprehensive cloud data protection. Encryption and tokenization play an important role in protecting payment and nonpayment data. This report describes key cloud encryption and tokenization use cases; outlines the benefits and challenges of cloud encryption, vaultless tokenization, and vaulted tokenization; and explains how security and risk (S&R) professionals can use our Encryption Vs. Tokenization Decision Tool to assess which mechanism to use for their data protection strategy.