A method and system for hiding sensitive data in an electronic spreadsheet. A first output equation expresses output data as a function of at least one first input data and at least one first intermediary result. The at least one first and second intermediary result are assigned as content of intermediary cells of the spreadsheet. A second output equation is generated and expresses the output data as a function of a subset of the at least one first and second input data with no functional dependence on the plurality of intermediary results. Generation of the second output equation utilizes the first output equation and the plurality of first intermediary equations. The output data of the second output equation is assigned as content of an output cell of the spreadsheet. The content of the intermediary cells is removed, resulting in the plurality of intermediary results not being identifiable in the spreadsheet.