Monitoring finding · EXC-005
VeriKYC data processing addendum missing
Control VEN-02Salesforce (Sales + Financial Services Cloud)Detected 9 Oct 2026Severity medium
VEN-02 · monitored control
Provider contracts include data protection and RBI audit clauses
VeriKYC data processing addendum missing
automated test
- Reasoning
- VeriKYC processes Aadhaar offline XML and PAN data but no DPA with RBI audit-right and 6-hour breach notification clauses has been executed.
- expected
- Not recorded
- observed
- Not recorded
- Action / owner
- ○ No data available
None
No review signal applies to this finding.