Also waiting for @Martin Fiser111 to chime in but I do believe the processor is the way to go here (as yes, the data would land in the docker container unencrypted, but only encrypted data would then go to SAPI to be saved while the container ceases to exist).

Milan VeverkaKeboola TEAM
Product Marketing at Keboola