Seasonal scale, permanent access
Retail scales up for peak and scales down afterward — compute, storage and staffing. Identities are the exception. Seasonal integrations, marketing platforms and fulfillment partners are onboarded under time pressure and offboarded by nobody.
“What still has access from last peak season?”
How the risk takes shape.
Peak-season onboarding skips governance
Access granted in November to keep fulfillment running is granted broadly and quickly. The review that would have narrowed it is scheduled for a quieter month that never arrives.
Marketing platforms hold customer data
Personalization, loyalty and analytics tooling authenticates into customer data stores. These are commercial relationships managed outside security, with access granted by whoever ran the integration.
Cardholder scope drifts with each integration
Every new payment, fraud or reconciliation integration is a potential expansion of PCI scope, determined by what the integration identity can reach rather than by what it was intended to do.
What we look for first.
These are structural patterns this operating model tends to produce — not findings from any particular organization. They are where an assessment starts, because the architecture makes them likely.
Whether they are present in your estate is an empirical question. That is the point of looking.
- Seasonal fulfillment and logistics partner identities retained year-round
- Marketing and personalization platform identities reaching customer data stores
- Point-of-sale and payment integration identities with inherited subscription scope
- Analytics service principals joining loyalty data to transaction data
Evidence, in your framework's language.
The reach set
Every identity that can reach your cardholder data, with the path each one takes — direct, inherited, nested, eligible or federated.
Control-mapped findings
Findings tied to the control families you evidence against — PCI DSS and GDPR — with the underlying facts attached.
One ranked decision
Not a backlog. The single highest-consequence move, with its projected outcome labeled as projected and its evidence trail intact.
Test these patterns against your own estate.
A scoped, read-only assessment on a subscription you choose. We answer the question above with your numbers, and tell you plainly where we could not determine something.
Free forever on a bounded estate · 30-day trial unlocks everything · No credit card
Read-only access · No agents · No log ingestion · Azure generally available