For your compliance officer
You are AML-supervised. We work to that standard.
Sending client financial records to an offshore provider is a decision your compliance function has to defend. Here is what they will ask for, stated plainly, before you have to ask us for it.
Where your data sits
- Processing location
- Jalandhar, Punjab, India
- Contact address
- dataprotection@bvisupport.com
Before anything moves
- Mutual non-disclosure agreement signed before any file is transferred
- Data processing agreement setting out purpose, retention and deletion
- Named engagement manager assigned to your account and disclosed to you
- Sub-processor list provided; no onward outsourcing without your written consent
How files are transferred
- Encrypted transfer through your portal, SFTP, or a controlled channel we provide
- Client records are never accepted by ordinary email or consumer file-sharing
- Each engagement uses a separate workspace; no shared drives across clients
Inside our environment
- Access limited to the named team on your engagement
- Removable media disabled on all workstations
- Personal email and consumer messaging blocked on the working network
- Access and activity logged and retained for audit
- Background checks on every staff member with client data access
- Individual confidentiality undertakings, surviving termination of employment
Retention and deletion
- Working papers retained for the period you specify in the DPA
- Certificate of deletion issued on request at the end of an engagement
- No client data used for training, benchmarking or any secondary purpose
Your own due diligence
- We complete your vendor due diligence questionnaire in full
- Right-to-audit clause accepted in the engagement letter
- References available from existing engagements, with their consent
- Certificates and insurance schedule provided before work begins
One thing we will not do
We do not accept client records before an NDA is in place, however urgent the deadline. If a provider offers to take your files first and paper it afterwards, that tells you what their controls are worth.
Documents