Automated Cardholder Data Pruning for Enterprise Compliance

Overview

As employee populations grow, so does the volume of identity data stored within physical access control systems. A global technology and networking company needed a reliable way to automatically remove inactive cardholder records, ensuring compliance with data privacy regulations while improving overall system performance.

With more than 620,000 cardholder records in its Lenel OnGuard Enterprise environment, manual record maintenance had become both time-consuming and unsustainable. The organization partnered with Octeum to develop an automated solution that continuously enforces data retention policies while minimizing administrative effort.

The Challenge

The organization faced two critical challenges that impacted both compliance and system efficiency.

Meeting Data Retention Requirements

Company policy required employee and contractor information to be removed two years after separation. However, Lenel OnGuard Enterprise did not provide an automated method for identifying and removing expired cardholder records.

As inactive records accumulated, personally identifiable information (PII) remained in the system longer than necessary, increasing compliance risk while contributing to unnecessary database growth and reduced system performance.

Maintaining Regulatory Compliance

Privacy regulations, including GDPR and CCPA, require organizations to securely remove personal information within defined retention periods. Existing manual processes made it difficult to consistently enforce these policies across hundreds of thousands of records.

Without automation, record removal became an expensive, repetitive task that introduced opportunities for human error and increased the risk of non-compliance.

Octeum’s Approach

Evaluate

Octeum assessed the customer’s data retention requirements, regulatory obligations, and Lenel OnGuard Enterprise architecture to understand how automated record removal could be implemented without disrupting normal operations. Special attention was given to replication behavior, cardholder relationships, and long-term system performance.

Enhance

Using Lenel’s supported OpenAccess API, Octeum developed a custom Windows service that automatically identifies cardholders exceeding the organization’s retention policy and securely removes their records.

The solution includes configurable scheduling, allowing the organization to control exactly when pruning occurs. Initially, the service operated during low-traffic weekend maintenance windows before transitioning to continuous operation once the backlog of inactive records had been eliminated.

To protect system performance, Octeum also developed a proprietary replication awareness feature that pauses pruning activities whenever replication activity reaches predefined thresholds, ensuring critical security transactions always take priority.

Manage

Following deployment, Octeum helped refine the service configuration to support continuous operation while maintaining optimal database performance. Automated pruning now keeps the cardholder database current without requiring ongoing manual administration, reducing operational overhead and helping ensure long-term compliance.

Results

Within the first 48 hours, Octeum’s automated solution securely removed more than 283,000 inactive cardholder records, immediately reducing years of accumulated obsolete data. Over time, the organization’s cardholder database was reduced from more than 620,000 records to approximately 210,000 records—a 66% reduction in stored cardholder data.

The organization now benefits from:

• 66% reduction in total cardholder records, improving database efficiency and reducing unnecessary data storage
• More than 283,000 inactive records automatically removed within the first 48 hours
• Automated enforcement of corporate data retention policies
• Continuous compliance with GDPR, CCPA, and internal privacy requirements
• Elimination of manual cardholder cleanup processes
• Reduced storage of personally identifiable information (PII)
• Improved Lenel OnGuard Enterprise database performance and responsiveness
• Intelligent replication monitoring that protects critical system operations
• A scalable, automated process that continuously maintains compliance as the organization grows

By reducing the cardholder database by more than two-thirds and automating ongoing data retention, Octeum helped transform a labor-intensive compliance process into a self-sustaining solution that improves system performance, lowers administrative overhead, and strengthens long-term regulatory compliance.