This graphic shows the use case for the PII policy within a single SOA composite.

The PII data is encrypted as is enters the SOA composite and decrypted as it leaves the composite.