A computer-implemented method of tokenisation is described. A first value for a
data field is provided, which is determined in accordance with a set of
data field rules - this is carried out for a set of first values which are or represent account numbers for
payment devices. These are stored in a secure
database. For each of this set of first values, some or all places in the
data field of the first value are encrypted using
format preserving encryption to provide an encrypted first token also complying with the set of data field rules. The set of encrypted first tokens is used in place of the set of first values in one or more operations associated with the data field in performance or authorisation of a digital transaction in a computing environment, within a
transaction processing system, that is directly accessible to human operators. A computing device adapted to implement such a method is also described.