Multitenant Data Retention Policy Moderation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need in the data management field for a method and system to apply data retention policies effectively, particularly in computing platforms where sensitive data must be protected to maintain compliance with regulations and prevent information liability.
Innovation Solution
A method and system that allow for the setting, moderation, and storage of data according to data retention policies, which can include transformative actions such as redaction, classification, aggregation, encryption, and partial deletion, tailored to individual accounts or data scopes within a multitenant computing platform.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is stored for analytics purposes, then data-driven operations are enabled, but sensitive information may be exposed and compliance regulations may be violated
Solution Approach 1:
The patent extracts sensitive information from data before storage by applying redaction techniques that remove personally identifiable information (PII) while preserving the underlying data structure and analytical value. This allows analytics to proceed on de-identified data, enabling data-driven operations without exposing sensitive information.
Solution Approach 2:
The patent introduces an intermediary processing layer that transforms raw data into anonymized data representations. This intermediary step creates a buffer between the original sensitive data and the analytics processing, allowing both compliance and analytical value extraction through controlled transformation.
2Loss of information
If all data is retained for analytics, then comprehensive analysis is possible, but compliance with data retention regulations cannot be maintained
Solution Approach 1:
The patent segments data retention policies into different categories based on data sensitivity, type, and regulatory requirements. Different retention periods and processing methods are applied to different data segments, allowing comprehensive analysis of appropriate data while maintaining compliance through differentiated retention strategies.
Solution Approach 2:
The patent applies preliminary data transformation and classification before storage, tagging data with metadata that indicates its retention requirements. This preliminary action enables automated compliance enforcement during data lifecycle management while preserving analytical accessibility within compliant timeframes.
3Object-affected harmful factors
If sensitive data is redacted or transformed, then compliance and security are improved, but data utility for analytics may be reduced
Solution Approach 1:
The patent applies redaction and transformation techniques selectively to specific data fields based on their sensitivity classification. Only portions of data requiring protection are modified, while other fields retain their original form and full analytical value. This localized approach maintains data utility for analytics while providing targeted protection for sensitive information.
Data Source
AI summary
Systems and methods for a multitenant computing platform. Original data is generated through operation of a computing platform system on behalf of an account of the computing platform system, and the original data is moderated according to a data retention policy set for the account. The moderated data is stored at the computing platform system. The computing platform system moderates the generated data by securing sensitive information of the generated data from access by the computing platform system, and providing operational information from the generated data. The operational information is accessible by the computing platform system during performance of system operations.