This shields data from unauthorized access even from database administrators at your business or at your cloud supplier which have direct access to the system, but do not have to perspective the fundamental data.  businesses have to have procedures in position to limit the places where sensitive data is saved, but which can't happen if they don't