Huntington Bank: Redacting sensitive data from 400M+ documents with AWS

Huntington National Bank used AWS services to redact sensitive customer data across a repository of more than 400 million on-premises documents. The solution moved files into Amazon S3, used Amazon Textract and AWS Step Functions to detect and process sensitive fields at scale, and then replicated redacted outputs back to on-premises storage. The program was designed to meet strict PCI DSS and access-control requirements while handling varied document formats.

Industry
Finance
Published
June 2026

Reported outcomes

+95%

redaction accuracyQuality & accuracy

10,000,000 documents/daydocuments processed per day−83.3%processing timeline5 % of original estimateprocessing cost

Strategic outcomes

Risk & complianceMet PCI DSS compliance requirementsScale & capacityEnabled large-scale document redaction across 400M+ files

Catalog median for quality & accuracy deployments: +90% across 282 reported metrics. Compare benchmarks →

Primary read

Use case focus

Showing 2 of 2

  • 1Document processing automation
  • 2Workflow automation
  • Redact sensitive customer data across hundreds of millions of documents stored on-premises.
  • Meet strict PCI DSS and access-control requirements.
  • Avoid a timeline that would have taken years with the original approach.
  • Migrated documents from on-premises storage to Amazon S3 using AWS Direct Connect, AWS DataSync, and AWS Key Management Service.
  • Used Amazon Textract in an orchestrated AWS Step Functions workflow to detect sensitive data and write metadata to Amazon S3.
  • Scaled processing with Step Functions map state and CloudWatch monitoring to handle very high concurrency and then replicated redacted outputs back on-premises.
  • Processed documents at a rate of approximately 10 million per day.
  • Reduced the estimated processing time from years to just a few months.
  • Reduced total processing cost to approximately 5% of the original estimate.
  • Redaction accuracy exceeded 95%.
  • The solution met compliance requirements and supported data security objectives.
Architecture

Huntington moved documents from on-premises file shares into Amazon S3 using AWS Direct Connect, AWS DataSync, and AWS Key Management Service. AWS Step Functions orchestrated large-scale Amazon Textract jobs using a map state for high concurrency, with CloudWatch used to monitor throughput and throttling. Detected fields and metadata were written to S3, then redacted files were synced back to on-premises storage with DataSync.

Sources & evidence1
Groundedness: 5/5Type: Blog PostPublished: Jun 24, 2026Publisher: AWS Machine Learning BlogEvidence: VendorConfidence: High

AI-generated summary. Verify important details with the linked sources before relying on this case.

Explore related AI use cases

Was this useful?