1. A method comprising: intercepting, by a gateway, data prior to the data reaching a cloud application, wherein the cloud application comprises a software application that functions within an externally hosted system, wherein the cloud application is in the externally hosted system, wherein the data is being uploaded to the externally hosted system, wherein the externally hosted system includes a cloud computing environment, associating, by the gateway, a file path with the data, wherein the file path comprises a directory location of the data within the data storage system; generating, by the gateway, a token, wherein the token comprises the file path; tokenizing, by the gateway, the data with the token; storing, by the gateway, the token to the cloud application; storing, by the gateway, the data to a token vault, wherein the token vault is internal to the gateway, wherein a mapping table is stored in the token vault, wherein the mapping table maps the data to the token, and wherein the token vault comprises a data storage system; receiving, by the gateway, a request for the data; retrieving, by the gateway, the token from the cloud application in response to a request from the gateway for the token from the cloud application; reading, by the gateway, the file path associated with the token; and identifying, by the gateway and based upon the token associated with the data, the data; receiving, by the gateway, the data in response to the reading the file path associated with the token.