I have a several Spring Boot applications that use BCryptPasswordEncoder to encrypt data I'll never need to directly use again - passwords, for example. However, I have quite a bit of sensitive data (SSN, credit cards) that I need to store securely, but will also need to use at some point. I could use something like Authorize.net (although this seems really expensive for our startup) to store the credit card info, but I still need SSN and other personal information.
My post on Stack Overflow suggested using symmetric keys, but I was hoping someone here might know a best practice, open source solution to securing data. I thought about using the db (PostgreSQL) but I heard that has issues as well.