Finance · Compliance & Regulatory
Privacy & data retention policies
An internal policy setting out how a financial firm collects, uses, shares, protects, and eventually disposes of customer and employee data.
What it usually contains
- Categories of personal and account data collected and lawful reasons for using it
- Rules on sharing data with affiliates, service providers, and regulators
- Retention periods by record type, such as account records, transaction logs, and communications
- Secure storage, access controls, and destruction procedures
- Breach notification steps, customer rights requests, and staff responsibilities
What the assistant uses it for
Use it to answer how long a given record must be kept before deletion, who may access customer data, and what steps to follow for a privacy request or suspected data breach.
How it is versioned
A document of this type has exactly one current version at a time. Upload a revision and it becomes the version that counts — the one before it is kept and dated, but is no longer what your assistant answers from. Nothing is ever deleted, so you can always show what this document said on a given date.
More in Compliance & Regulatory
Filed alongside this one.
On one AI system
Everything your company knows.
One version that counts.
You already own the documents. We make them the only thing your AI is allowed to answer from, and we keep them current — so nobody quotes last year’s price by accident again.