Protections for stored data

A card-on-file (COF) tracking system, comprising:

• one or more processors;
• at least one storage system;
• and
• instructions stored on the at least one storage system that when executed by the one or more processors, direct the COF tracking system to:
• receive, over a payment network, a plurality of transaction messages and non-financial advice messages;
• identify, from the plurality of transaction messages and non-financial advice messages, a non-financial advice message comprising a card-on-file (COF) notice, a merchant identifier (ID), and payment card information of a payment card, wherein the merchant ID corresponds to a merchant that received payment card details comprising the payment card information during a non-transaction event;
• identify, from the payment card information, an issuer associated with the payment card details;
• send a COF message indicating storage of the payment card details at the merchant to the issuer;
• and
• receive, from the issuer, confirmation that the payment card is recorded as a COF.

A method, comprising:

• managing, at a storage resource, card-on-file (COF) information for payment cards the COF information comprising merchant identifiers (IDs) of merchants storing payment card details of a particular payment card during non-transaction events and merchant IDs of merchants storing the payment card details of the particular payment card as part of a transaction that includes COF authorization;
• receiving, at a graphical user interface (GUI) for an application, a request to identify entities that have payment card information of the particular payment card stored on file;
• identifying, from the COF information at the storage resource, all merchants associated with the particular payment card, including any merchants that received the payment card details during non-transaction events;
• obtaining a merchant profile for each identified merchant associated with the particular payment card;
• and
• providing, for display at the GUI for the application, the merchant profiles for each identified merchant such that a cardholder of the particular payment card is aware of which entities are storing the payment card information of the particular payment card, even when no transaction has occurred at that entity.