Governance features built into live collections operations.

1. Operational compliance scope

• Collections communication workflow management
• Auditability of user actions and message activity
• Security incident and complaint handling workflows
• Data subject request and retention workflow support
• Bank-scoped operational segregation

2. Platform and messaging controls

• Meta WhatsApp Business direct integration
• Approved template usage
• Webhook verification, signature checks, and reply processing
• Lawful-basis and suppression gating for WhatsApp sends
• Permission-health validation for production messaging

These controls exist to support business messaging that is governed, reviewable, and linked to authorised operational processes rather than unmanaged or informal communication.

3. Governance features available in the system

• Export approval and governed download workflow
• Security incidents register and event timeline
• Compliance console for requests, complaints, officers, retention, and transfers
• Import upload tracking and malware-scan support
• Role-based administrative separation across operational and review roles

4. Meta and WhatsApp compliance controls

• Use of approved business templates for business-initiated WhatsApp messaging
• Restriction of outbound WhatsApp sends where lawful basis or suppression controls are not met
• Tracking of inbound WhatsApp replies and message status events in the authorised business workflow
• Publicly accessible privacy, compliance, and terms pages tied to the owning business and application
• Operational controls intended to support authorised and non-deceptive business use of Meta platform functionality

5. Complaint, incident, and data-rights handling

The application includes workflow support for complaints, security incidents, exports, imports, requests, retention activity, and review actions so that sensitive business activity can be traced and escalated through an authorised compliance process.

Related public data deletion instructions are published on the Data Deletion page.

Public-facing purpose

This page is provided as a publicly accessible summary of the application’s governance and compliance posture so external stakeholders and platform reviewers can verify the business and app context without requiring authenticated CRM access.