A system for secure commingling of tenant isolated data includes a commingling storage unit, an interface, and a processor. The interface is configured to receive an indication of tenant data to be commingled. The processor is configured to determine one or more instances of sensitive data included in the tenant data, and indicate to transfer the tenant data to be stored in the commingling storage unit without transferring the one or more instances of sensitive data.