How about just using Certificates? Are they trusted enough to make sure the information is encrypted over the WAN since the data being sent has PII? I'm trying to keep this solution as simple as possible but still trying to make it as safe as possible. Can you use Certificates going from an Oracle database to a SQL database? I believe the Oracle database resides on a Unix box.