Status: Not effective until the operating entity, jurisdiction, processors, transfer mechanisms, security and retention policies have been verified.
Business contact information, beneficial ownership and control information, tax and licensing records, financial statements, bank-account verification, underwriting history, and information about the products and services offered.
Application evaluation, identity and beneficial-ownership verification, lawful anti-fraud and sanctions screening, risk underwriting, establishing merchant services, customer support, recordkeeping and legal obligations.
Approved service providers, identity-verification vendors, payment gateways, acquiring banks and processors when necessary and lawful. Access to financial documents should be restricted to authorized underwriting reviewers. Submission of an inquiry does not authorize indiscriminate team-wide distribution.
Financial and identity documents must be submitted through a separately authenticated encrypted document portal, not as unsecured email attachments. Implement transport encryption, private encrypted storage, malware scanning, access logs and time-limited access before enabling uploads.
Where Singapore–United States or other cross-border transfers apply, the final notice must identify the operating entities, hosting jurisdictions, legal basis and transfer safeguards.
Applicable privacy rights, retention periods, deletion exceptions, and an active controller contact address must be inserted and approved before launch.