1. A system, comprising: a first computing device configured as an encryption gateway, the first computing device comprising at least one processor and at least one memory, the encryption gateway configured to authenticate a client application using at least one authentication factor , to receive data in a payload from the client application, to encrypt the data, and to send or write the encrypted data to a remote cloud storage or server; and a key manager configured to provide at least one key to the encryption gateway for encryption of the data in the payload, wherein at least one key is associated to the client application or the payload, and the encryption of the data uses a remote-side transport protocol associated with the remote cloud storage or server.