City Of Plano Protects PeopleSoft Data With Context-Aware Masking 

Discover how the City of Plano protected sensitive PeopleSoft data with Pathlock’s real-time masking solution that adapts based on where users log in.

The Challenge of Remote Data Access

As remote work became more common across municipal agencies, the City of Plano sought a way to prevent unnecessary exposure of personally identifiable information (PII) and sensitive financial data in its PeopleSoft environment. By implementing Pathlock’s Dynamic Data Masking, the city achieved granular control over how and when that data is visible without disrupting user access.

Static Controls Left Gaps in Data Protection

Plano’s existing data masking tools offered only limited, hardcoded options. They could mask a narrow set of fields, but couldn’t control when or how that masking occurred. With employees accessing PeopleSoft from various locations and devices, the city was concerned that sensitive information like Social Security numbers and bank account details could be viewed, duplicated, or even leaked through phishing attacks.

Plano needed a more intelligent, context-aware solution that could dynamically adjust based on how PeopleSoft was being accessed.

Real-Time, Rule-Based Masking With Pathlock Native

By deploying Pathlock Native for PeopleSoft, the City of Plano extended masking capabilities to all sensitive fields within its ERP environment. The platform’s flexible rules engine allowed the PeopleSoft team to define fine-grained policies that controlled data visibility based on:

• User ID
• Device type
• IP address
• Location of access

With this in place, the city could selectively block or partially mask PII and financial data when employees accessed PeopleSoft from outside the trusted corporate network.

The Results: Flexible Data Access, Zero Compromise on Security

With Pathlock, Plano now has complete control over how sensitive data is accessed—without impacting the underlying records or disrupting employee workflows.

• Sensitive data remains protected when accessed remotely.
• Rules adjust in real time, based on the context of each login.
• No changes to infrastructure or data architecture were required.