The Transit Secrets Engine handles cryptographic functions on data in-transit. Vault doesn't store the data sent to the Secrets Engine. It can also be viewed as "cryptography as a service" or "encryption as a service".