I've been part of building a CryptoPOC project for PII data using Protegrity. It was AWS recognized usecase and was featured in their forum.
If you have similar needs of setting a framework I can guide on you on the same.
