1. A system, comprising: one or more processors; and memory including computer executable instructions that, when executed by the one or more processors, cause the system to: provide, by a service provider, an application programming interface accessible to one or more customers at a network address; receive, by the service provider, data in connection with a request to perform one or more operations submitted to the application programming interface by the one or more customers; analyze, by the service provider, the data to identify, based at least in part on a data type: a subset of data that has the data type and that meets one or more criteria of one or more data policies, wherein an encryption algorithm is selected from a plurality of encryption algorithms based on the data type and security requirement associated with the one or more data polices; modify, by the service provider, the subset of the data in accordance with the one or more data policies by at least encrypting the subset of the data using a cryptographic key inaccessible to a remote service that is independently capable of processing the request to perform the one or more operations, wherein the remote service comprises a set of computer systems that excludes the system and the cryptographic key is not stored in the remote service in plaintext form; and provide, by the service provider, the modified subset of the data to the remote service, wherein the remote service provides data-related services to customers.