1. A computer-implemented method for monitoring a usage of one or more protected data types, the method comprising: providing, by way of a computer system, a protected data type library comprising one or more protected data type classes for performing operations on the one or more protected data types; generating a fact manifest at a build time of a software package that uses at least one of the one or more protected data type classes, the fact manifest comprising data identifying the one or more protected data types used by the software package; causing the software package to be deployed to one or more hosts for execution; and generating a protected data type usage graph from at least the fact manifest, the protected data type usage graph comprising data identifying the one or more protected data types utilized by the software package and the one or more hosts to which the software package has been deployed for execution.