Solutions / Fintech & payments
One set of records for every supervisor you answer to
A lender or payments business answers to the Central Bank, the Commission, the card schemes and its partners. Asiri keeps the records each answer is read from in one workspace.
Who a lender answers to
- Central BankCBN
Customer and transaction records kept for the period financial regulation sets.
Retention register - The lawThe Commission
What you process, who receives it and where it goes, filed through a licensed DPCO.
Activities register - Card schemesPCI DSS
Which systems touch card data, and evidence the scope has not crept.
Security register - BuyersYour partners
A page they can read before signing, with scope and exclusions on it.
Trust Centre
What a supervisor asks, and the record a lender shows
- A customer closing their account
“Delete everything you hold about me.”
Erase what you can. Restrict what you must keep.
Financial regulation can require you to keep the transaction record that the customer wants erased. Record the retention rule, restrict what you keep, erase the rest and send a reply that explains both.
What Asiri keeps
- The retention rule and its source
- Which records were erased
- The reply that was sent
- An applicant who was declined
“Why was my loan refused?”
Keep a person behind every automated decline
The Act gives people a route to a human when a machine decides. Record what the model weighs, who reviews a decline and how an applicant reaches them, in one assessment.
What Asiri keeps
- The model assessment
- Who reviews declines
- The published route to a person
- A partner’s due diligence team
“Where does our customers’ data go?”
Show every transfer, including the analytics
The warehouse your data team set up abroad is a transfer too. Keep each destination, its grounds and the supplier agreement on record before a partner asks.
What Asiri keeps
- Each transfer and its grounds
- Supplier agreements
- What the Trust Centre shows
How a lender keeps the work moving
- Define service scope
- Assign owners
- Gather and review evidence
- Follow findings through
Organise the requirements
Keep regulatory, internal and customer requirements in clearly scoped programmes.
Connect operations and risk
Bring processing records, suppliers, security controls and assessments into the review.
Prepare for scrutiny
Coordinate evidence and follow-up with internal reviewers and authorised professionals.
Registers a lender keeps current
Frameworks a lender runs together
Where Asiri stops
Requirements depend on the business, services and regulators involved. Asiri organises the work; your advisers determine the applicable obligations and professional opinions.
What lenders ask before they start
- Does Asiri tell us which regulations apply?
- No. That depends on your licence, services and supervisors. Asiri organises the records and the work; your advisers decide the obligations.
- How do we handle erasure for data we must keep?
- Record the retention requirement, restrict what you must keep and erase what you need not. Asiri keeps the reasoning and the reply with the request.
- Can Asiri run our PCI DSS assessment?
- No. Asiri keeps the system inventory, scope and evidence. A qualified assessor or your own self-assessment decides compliance.
- Who files our annual return?
- A licensed DPCO. Asiri prepares the return from your records and lets you give the DPCO the access they need.