Vaultless Tokenization at National Scale | Japan Case Study | Rixon

How a leading Japanese financial services provider deployed Rixon’s vaultless keyless tokenization platform to achieve 2.5M+ TPS, full APPI compliance, and PCI DSS v4.0.1 attestation with zero downtime.

Anonymous | Japanese Financial Services

2.5M TPS

Peak Throughput

<1ms

Token Latency

100%

Uptime Maintained

0

Token Duplications

Executive Summary

About this case study

Who: A leading Japanese financial services provider operating a large-scale payment orchestration platform serving over one million merchant locations across Japan.

What: Deployment of Rixon Technology’s patented vaultless, keyless tokenization platform to replace vault-based tokenization infrastructure, achieving PCI DSS v4.0.1 compliance, APPI data sovereignty, and 2.5M+ TPS performance.

Where: Japan. All tokenization processing within-country across AWS Tokyo and Osaka regions. Full APPI data residency compliance by design.

Outcome: 2.5M+ TPS sustained throughput, sub-millisecond latency, 100% uptime, zero token duplications, and full PCI DSS v4.0.1 Service Provider attestation delivered on schedule.

A leading Japanese financial services provider operating one of Asia’s most advanced payment orchestration platforms required a tokenization architecture capable of extreme throughput, full data sovereignty, and structural PCI scope reduction — without introducing latency or operational complexity.

After an extensive evaluation of available vendors, the organization selected Rixon Technology’s patented vaultless, keyless tokenization platform. The solution was deployed entirely within Japan across redundant cloud regions, supporting transaction volumes exceeding 2.5 million per second with sub-millisecond latency and zero token duplication.

The result is a production-grade, cloud-native architecture that eliminates centralized vault risk, meets Japan’s APPI data sovereignty requirements, and satisfies PCI DSS v4.0.1 Service Provider obligations — all without infrastructure overhead or downtime.

Client Profile

Industry: Financial Services and Payment Orchestration

Region: Japan (all processing within-country)

Scale: High daily transaction volume across Japan’s payments infrastructure

Merchant Reach: Over 1 million online and offline locations

Supported Payment Methods

  • Credit and debit cards
  • QR code payments
  • Convenience store payments
  • Bank transfers and electronic money
  • International payment options
  • Recurring billing and card lifecycle management

The Challenge

Operating at national scale across Japan’s cashless payments infrastructure, this organization faced a set of non-negotiable requirements that traditional vault-based tokenization vendors could not meet:

Five Non-Negotiable Requirements

Traditional tokenization approaches introduced compounding problems at this scale: centralized vault architectures created single points of failure, key management overhead added operational complexity, and vault database lookups introduced latency that degraded transaction performance under peak load. The organization needed a structurally different approach.

Why Rixon Was Selected

Japan Data Sovereignty by Design

Rixon deployed its platform entirely within Rixon-managed AWS infrastructure in the Tokyo and Osaka regions. All tokenization processing occurs within Japan. Built-in geofencing ensures sensitive payment data never leaves Japanese jurisdiction, satisfying APPI data residency requirements by architectural design — not configuration workaround.

True Vaultless Architecture with No Persistent Data Storage

Rixon’s patented vaultless tokenization eliminates centralized token vault databases entirely. No original payment data is stored within the Rixon platform. Sensitive values are processed ephemerally and converted into deterministic format-compatible tokens, removing vault breach attack vectors, eliminating token mapping databases, and reducing PCI audit scope.

Enterprise Performance at Extreme Scale

The platform delivers sub-millisecond response times and sustains throughput exceeding 2.5 million transactions per second — a performance benchmark validated during pre-production load testing and maintained in live production. Unlike vault-based systems, performance does not degrade as transaction volumes increase.

Multi-Region Cloud Resilience

The deployment spans active infrastructure across Tokyo and Osaka with automatic regional failover, three geographically distributed infrastructure sets, and architecture designed for cross-cloud continuity. The system maintains service availability even during full regional cloud outages.

Implementation Approach

The deployment followed a structured, six-phase agile methodology: discovery and architectural alignment, customization and integration, testing and validation, pilot deployment, full-scale rollout, and post-deployment optimization. The system went live on schedule with zero downtime.

Key Delivery Commitments Met

  • API-first integration requiring minimal changes to existing payment flows
  • Configurable tokenization formats to match existing data structures
  • PCI DSS v4.0.1 Service Provider Attestation of Compliance delivered
  • 24/7 monitoring, incident response SLA: critical issues acknowledged within 15 minutes
  • Rixon retains no client cardholder data — sensitive data exists only in memory during the tokenization event
Results

Metric

Outcome

Transaction Throughput

Sustained 2.5M+ transactions per second

Tokenization Latency

Sub-millisecond at peak load — no performance degradation

Uptime

100% maintained with automated regional failover

Token Duplication

Zero incidents since production launch

PCI Audit Scope

Materially reduced — no stored PANs in Rixon infrastructure

Data Sovereignty

Full APPI alignment — all processing within Japan

Operational Complexity

Eliminated vault management, key rotation, and replication overhead

Strategic Implications

This deployment demonstrates that for financial institutions operating at national scale, tokenization can deliver structural elimination of stored PAN risk, cloud-native resilience, full regulatory alignment, and deterministic performance under extreme load — simultaneously and without trade-offs.

Vaultless, keyless tokenization shifts the security model from protecting stored sensitive data to eliminating stored sensitive data. The attack surface is not reduced — it is removed.

The platform supports transaction volumes exceeding 2.5 million per second with sub-millisecond latency, zero duplication, and 100% uptime — entirely within Japan.

Rixon Technology | Production Performance Summary

Frequently Asked Questions

Vaultless tokenization replaces sensitive structured payment data — such as credit card numbers — with deterministic tokens, without storing the original values in a token vault or mapping database. There is no centralized repository of sensitive data to breach.

By ensuring all processing remains within designated Japanese cloud regions and eliminating persistent storage of sensitive payment data, the architecture supports data residency and data minimization principles under Japan’s Act on the Protection of Personal Information (APPI).

Yes. Cloud-native vaultless architectures eliminate the database bottleneck inherent in vault-based systems and support true horizontal scaling. Rixon’s platform sustains 2.5M+ TPS in live production with no observable latency increase under peak load.

Because sensitive payment data is never persistently stored within the tokenization service, fewer systems qualify as in-scope for PCI assessment. This reduces audit surface, simplifies compliance obligations, and lowers the cost of annual assessments.

Yes. Any platform handling high volumes of payment or identity data benefits from eliminating vault concentration risk and database performance bottlenecks. The architecture is cloud-provider agnostic and deploys within any designated region to meet local sovereignty requirements.

Want to discuss a deployment like this?

Additional technical documentation is available for qualified prospects under NDA. To learn more about how vaultless keyless tokenization works, visit rixontechnology.com. For implementation guidance, see the Fintech Practical Guide on our resources page.