Underlying concept. Figure 1 shows the general concept underlying DataSafe, an architecture designed to support self-protecting data.2 Protected data is encrypted, and access control and usage policies are attached to the data. The only way to transfer protected data between machines is via this data package.