US Patent 11790470 Storage service for sensitive customer data

Techniques are described for storing customer data in compliance with data retention policies, including data retention policies that may imposed by law or regulation. A merchant website may be configured to gather customer information using an inline form obtained from a service provider, where the inline form protects the customer information from being accessed by the website. The customer information is provided from the inline form to the service provider, and the service provider stores the customer information for the merchant, while applying appropriate data retention policies. The merchant may avoid potential violations of retention policies by accessing the stored information without committing it to local persistent memory. In some cases, the stored information may be presented to the merchant through an inline form that protects the information from being accessed by computing components of the merchant.