A financial services company allows a team of data analysts to run queries against a production customer database that contains full account numbers. The analysts only need to see partial account numbers to perform trend analysis, and they must never be able to view the complete values. Which data protection method best meets this requirement while keeping the data usable for the analysts?