24. The computer program product of claim 19 , wherein the character string is stored as a record in a database that is remote from the storage memory.
19. A computer program product for using a unique token in an online transaction on a website involving sensitive information to control access to the sensitive information, the computer program product comprising a computer-readable storage embodying computer-readable program instructions that, when executed, cause a processor to: register at least one entity, the registering comprising associating the at least one entity with a subscription level; in response to receipt of the sensitive information from a merchant device, generate a unique token for use in place of the sensitive information, wherein the sensitive information comprises a character string stored as encrypted data; directly associate a sub-string of a character string with the unique token so that a direct association does not exist between the unique token and the character string, the character string comprising the sensitive information and the sub-string being configured to identify the character string without revealing the sensitive information; and access the character string stored as encrypted data in storage memory using the unique token and the sub-string to retrieve the sensitive information after transmission of a request for the sensitive information from a registered entity associated with a subscription level associated with a privilege to receive the requested sensitive information.