# US 12,602,514 B1 · Method and system for processing personally identifiable information (PII) across geographical boundaries

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,602,514 B1
- Document ID: US12602514B1
- Status: Granted
- Kind: B1
- Application number: 19/319,962
- Filed: 2025-09-05
- Granted: 2026-04-14
- Earliest claimed: 2025-09-05
- Assignees: Moengage India Private Limited
- Applicants: Moengage Inc.
- Inventors: Ajish Nair; Yashwanth Kumar; Nikhil Kumar; Shilpa Narayana Reddy
- Web page: https://patentgrep.com/patent/US12602514B1

## CPC

- G06F 21/6254: {by anonymising data, e.g. decorrelating personal data from the owner's identification}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method for processing sensitive user personally identifiable information (PII) data across geographical boundaries, including: receiving in real-time, by a personally identifiable information (PII) resolver within a first location, a payload data object from a first processing unit at a second location, wherein the payload data object comprises: a header comprising metadata, a body comprising a message to be sent to a user, and a first identifier associated with the user; determining, by the PII resolver, a second identifier and a third identifier stored in a database corresponding to the received first identifier, wherein the database includes a mapping between the first identifier, and the second identifier, and the third identifier; replacing, by the PII resolver.

## Claims

### Claim 1

A method for processing sensitive user personally identifiable information (PII) data across geographical boundaries, comprising:
receiving in real-time, by a personally identifiable information (PII) resolver within a first location, a payload data object from a first processing unit of a business enterprise entity at a different second location, wherein the payload data object comprises: a header comprising metadata, a body comprising a message to be sent to a user, and a first identifier associated with the user;
determining, by the PII resolver, a second identifier and a third identifier stored in a database corresponding to the received first identifier, wherein the database includes a mapping between the first identifier, and the second identifier, and the third identifier;
replacing, by the PII resolver, the first identifier in the payload data object with the corresponding second identifier to generate a modified payload;
sending using the third identifier, by the PII resolver, the modified payload, to a second processing unit of a service provider;
receiving, by the PII resolver, a delivery callback message from the second processing unit of the service provider, wherein the delivery call back message includes: a delivery information of the modified payload and the second identifier;
replacing, by the PII resolver, the second identifier with the first identifier of the user in the received delivery call back message to generate a modified delivery call back message; and
sending, by the PII resolver, the modified delivery callback message to the first processing unit of the business enterprise entity, wherein the modified delivery callback message comprises the replaced first identifier thereby processing the user sensitive PII data while maintaining data privacy across the geographical boundaries as well as causing the first processing unit of the business enterprise entity to update a campaign status based on the modified delivery callback.

### Claim 2 (depends on 1)

The method of claim 1, wherein the second processing entity is located in the first location.

### Claim 3 (depends on 1)

The method of claim 1, wherein the second processing entity is located in a third location.

### Claim 4 (depends on 1)

The method of claim 1, wherein the second identifier is a channel-specific identifier representing PII, and wherein the channel-specific identifier represents at least one of an email address or a phone number.

### Claim 5 (depends on 1)

The method of claim 1, wherein the second identifier is a channel name via which the payload is sent.

### Claim 6 (depends on 1)

The method of claim 1, wherein the delivery information includes at least one of a delivery status, a timestamp, or an engagement metric.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
updating, by the first processing entity, a campaign status based on the modified delivery callback.

### Claim 8 (depends on 1)

The method of claim 1, wherein the method further comprises:
encrypting the second identifier using an encryption algorithm before storing the second identifier in the database; and
storing an encrypted version of the second identifier in the database.

### Claim 9

A system for processing sensitive user personally identifiable information (PII) data across geographical boundaries, comprising:
a personally identifiable information (PII) resolver deployed within a geographic boundary of a regulated region, the PII resolver comprising:
a processor device;
a memory storing instructions that, when executed by the processor device, cause the PII resolver to:
receive in real-time, by a personally identifiable information (PII) resolver within a first location, a payload data object from a first processing unit of a business enterprise entity at a different second location, wherein the payload data object comprises: a header comprising metadata, a body comprising a message to be sent to a user, and a first identifier associated with the user;
determine, by the PII resolver, a second identifier and a third identifier stored in a database corresponding to the received first identifier, wherein the database includes a mapping between the first identifier, and the second identifier, and the third identifier;
replace, by the PII resolver, the first identifier in the payload data object with the corresponding second identifier to generate a modified payload;
send using the third identifier, by the PII resolver, the modified payload, to a second processing unit of the service provider;
receive, by the PII resolver, a delivery callback message from the second processing unit, wherein the delivery call back message includes: a delivery information of the modified payload and the second identifier;
replace, by the PII resolver, the second identifier with the first identifier of the user in the received delivery call back message to generate a modified delivery call back message; and
send, by the PII resolver, the modified delivery callback message to the first processing unit of the business enterprise entity, wherein the modified delivery callback message comprises the replaced first identifier thereby processing the user sensitive PII data while maintaining data privacy across the geographical boundaries as well as causing the first processing unit of the business enterprise entity to update a campaign status based on the modified delivery callback.

### Claim 10 (depends on 9)

The system of claim 9, wherein the second processing entity is located in the first location.

### Claim 11 (depends on 9)

The system of claim 9, wherein the second processing entity is located in a third location.

### Claim 12 (depends on 9)

The system of claim 9, wherein the second identifier is a channel-specific identifier representing PII, and wherein the channel-specific identifier represents at least one of an email address or a phone number.

### Claim 13 (depends on 12)

The system of claim 12, wherein the first processing entity comprises:
a processor;
a memory storing instructions that, when executed by the processor, cause the processing entity to:
update a campaign status based on the modified delivery callback.

### Claim 14 (depends on 9)

The system of claim 9, wherein the second identifier is a channel name via which the payload is sent.

### Claim 15 (depends on 9)

The system of claim 9, wherein the delivery information includes at least one of a delivery status, a timestamp, or an engagement metric.

### Claim 16

A system for processing sensitive user personally identifiable information (PII) data across geographical boundaries, comprising:
a personally identifiable information (PII) resolver deployed in a first location, the PII resolver comprising:
a first processor device;
a first memory storing first instructions that, when executed by the first processor device, cause the PII resolver to:
receive in real-time, by the personally identifiable information (PII) resolver within the first location, a payload data object from a first processing unit of a business enterprise entity at a different second location, wherein the payload data object comprises: a header comprising metadata, a body comprising a message to be sent to a user, and a first identifier associated with the user;
determine, by the PII resolver, a second identifier and a third identifier stored in a database corresponding to the received first identifier, wherein the database includes a mapping between the first identifier, and the second identifier, and the third identifier;
replace, by the PII resolver, the first identifier in the payload data object with the corresponding second identifier to generate a modified payload;
send using the third identifier, by the PII resolver, the modified payload, to a second processing unit of the service provider;
receive, by the PII resolver, a delivery callback message from the second processing unit, wherein the delivery call back message includes: a delivery information of the modified payload and the second identifier;
replace, by the PII resolver, the second identifier with the first identifier of the user in the received delivery call back message to generate a modified delivery call back message; and
send, by the PII resolver, the modified delivery callback message to the first processing unit of the business enterprise entity, wherein the modified delivery callback message comprises the replaced first identifier thereby processing the user sensitive PII data while maintaining data privacy across the geographical boundaries; and
the first processing unit comprising:
a second processor device;
a second memory storing second instructions that, when executed by the second processor device, cause the first processing unit to:
transmit the payload data object to the PII Resolver;
receive the modified delivery callback from the PII resolver, wherein the modified delivery callback comprises the first identifier of the user; and
update a campaign status based on the modified delivery callback.

### Claim 17 (depends on 9)

The system of claim 9, wherein the PII resolver is further configured to:
encrypt the second identifier using an encryption algorithm before storing the second identifier in the database; and
store an encrypted version of the second identifier in the database.
