Reference
Pax deletes automatically across SAP and non-SAP systems
Pax, the Swiss pension insurer based in Basel, uses Espresso Data Privacy to delete personal data automatically across SAP and non-SAP systems – in production since 2024.
Introduction
Pax, a Swiss pension insurer rooted in the cooperative model, has taken an important step towards modern data protection processes with our support. By implementing the Espresso Data Privacy solution, Pax was able to successfully meet the complex requirements of GDPR/FADP compliance while making internal processes more efficient.
The solution was seamlessly integrated into Pax's existing IT landscape and enables automated data deletion across various systems. This project marks a milestone in Pax's digital transformation journey and underlines the company's commitment to data security, operational efficiency and regulatory compliance.
About the customer
Pax is a long-established Swiss company based in Basel, founded in 1876. Pax Versicherung is organised under the cooperative umbrella of Pax Holding and offers solutions for private and occupational pension provision that are both tailored to needs and simple. Pax customers are also members of the cooperative. They benefit from sustainable management and share in the company's financial success. Credible, forward-looking, direct – this is how Pax shapes its relationships with its customers, business partners and employees.
With a clear commitment to data protection and regulatory compliance, Pax implemented the Espresso Data Privacy solution together with us – with the aim of optimising its data management processes and ensuring compliance with GDPR/FADP standards.
Challenges
Pax faced considerable challenges in automating its data deletion processes while complying with the requirements of the GDPR and the FADP. Although its data objects and products were similar to those of large insurance companies, complex dependencies between the applications made implementation difficult. At the same time, the company's internal infrastructure was undergoing a profound transformation – with the aim of making greater use of technologies such as Azure Service Bus and API management. However, these solutions were still at an early stage, which made orchestrating automated data deletion workflows across the various systems even more difficult.
Our solution
We deployed our central solution for orchestrating data deletion, which enables seamless integration into Pax's systems, automates data workflows and ensures compliance with legal requirements. The project comprised several key phases:
- 1
Analysis of Pax's complex IT landscape
We carried out a comprehensive assessment of the existing infrastructure and systems, identified critical dependencies and ensured that all relevant applications were included in the deletion process.
- 2
Design of IT architecture concepts
Our team developed a flexible and scalable architecture that meets the requirements of Pax's diverse system landscape. This included creating robust workflows to automate data deletion while minimising errors and data inconsistencies.
- 3
Integration of SAP and non-SAP systems
One of the biggest challenges was bridging the gap between Pax's SAP and non-SAP environments. We ensured that data deletion was orchestrated consistently in both areas and that smooth integration and data synchronisation were possible.
- 4
Connection of the SAP proxy
To further optimise the deletion workflows, we established a secure connection to the SAP proxy in order to integrate SAP-based data efficiently into the orchestration framework.
- 5
Integration of Azure Service Bus
By integrating Azure Service Bus, we ensured reliable communication between Pax's internal systems, enabling reliable control of deletion orders across different applications.
- 6
Definition of deletion chains across complex systems
Based on a comprehensive data deletion concept, we developed and implemented a deletion chain strategy. It ensures that data deletions are carried out consistently and correctly across systems – taking into account all dependencies between applications and business objects.
- 7
Establishment of operational processes
After the initial rollout, we focused on setting up operational processes to ensure the long-term effectiveness of the data deletion solution. This included introducing monitoring and administration as well as ongoing adjustments to the workflows in line with the evolution of Pax's IT environment.
Results
Thanks to the implementation of the Espresso Data Privacy solution, Pax benefits from several improvements:
Full automation of deletion and anonymisation
The solution automated the entire process of data deletion and anonymisation across multiple systems and completely replaced manual processes.
Considerable time savings
By automating the deletion and anonymisation processes, Pax achieved significant time savings, streamlined internal processes and reduced operational effort.
Full compliance with GDPR/FADP requirements
The solution ensures that all data deletion processes comply with the current legal requirements of the GDPR and the FADP, minimising legal and regulatory risks.
Increased system stability
The automated orchestration of data deletion across different systems improved the reliability of the entire IT landscape and reduced the risk of errors and data inconsistencies.
Successful go-live
Espresso Data Privacy was successfully transferred to the production environment, enabling Pax to meet complex data deletion requirements reliably and efficiently.
Deletion of diverse business data across multiple applications
The solution seamlessly orchestrated the deletion of different types of business data from various applications, ensuring a consistent and secure deletion process.
Customer testimonial
“Pax stands for simple, digital processes with personal service for customers and sales partners. Thanks to the Espresso Data Privacy solution, we were able to streamline these processes significantly and achieve full compliance with data protection laws effortlessly. The system ensures smooth, uninterrupted operation across our entire company – with minimal effort. Even system upgrades can be carried out seamlessly without affecting our day-to-day operations.
In addition, working with the team behind the solution has been invaluable – their expertise and support were crucial in enabling us to achieve our goals while maintaining our operational efficiency.”
Outlook
Our partnership with Pax continues as we jointly explore further automation features and improvements to both Pax's data management processes and our Espresso Data Privacy solution. We value the close and open collaboration, which is based on a strong relationship of mutual trust and allows us to continuously adapt and further develop the solution in line with Pax's changing requirements. This ongoing partnership ensures that Pax will continue to play a leading role in data protection management – while maintaining consistently high operational efficiency and full compliance.
Learn more
- Data DeletionThe module Pax uses to delete across all systems.
- Deleting across many systemsOrchestration, approval and objections – what matters.
- Data deletion conceptFrom concept to retention periods that apply in the systems.
- Architecture and integrationConnect applications, design deletion chains.
See Espresso in 30 minutes
We will show you the cockpit with sample data – and discuss where you should start.
Request a demoor write directly to info@espressodataprivacy.com