The page your risk committee should read first
Outsourcing recovery transfers conduct risk to a vendor. We exist to make that transfer safe — RBI-aligned operations, auditable conduct, and data handling your regulator expects.
Four pillars, enforced — not promised
Each is built into the workflow so compliance doesn't depend on an agent remembering a rule.
RBI Fair Practices alignment
Operations mapped to RBI's recovery-agent guidelines and digital-lending norms — calling windows, disclosure, and grievance redressal enforced in the dialer, not left to memory.
Certified agent training
Every agent clears a structured certification on conduct, RBI norms and de-escalation before touching a live account, with periodic recertification.
100% call auditing
All calls are recorded, sampled and QA-scored against a conduct rubric. Breaches trigger coaching or removal — and a clean audit trail for you.
DPDP-ready data handling
Encrypted data exchange, role-based access, masked PII and retention controls aligned to the DPDP Act. Borrower data handled the way your regulator expects.
Every conversation is evidence
Recovery conduct is only as good as what you can prove. We hand you an audit trail, not assurances.
100%
of calls recorded and retained per policy
QA
calls sampled daily, scored against a conduct rubric
0-tolerance
for abuse, threats or off-window calling
Grievance
redressal SLA mapped to RBI expectations
Borrower data treated the way you're required to
When you share a portfolio with us, you remain the data fiduciary. Our controls are designed so that relationship stays defensible.
- Encrypted data exchange (TLS in transit, AES-256 at rest)
- Role-based access with least-privilege provisioning
- PII masking for agents who don't need full visibility
- Defined retention windows and verified data destruction
- Audit logs on every access to borrower records
- Segregated environments per client mandate
A note on regulation
We align our operations to the RBI Fair Practices Code for recovery agents and the Digital Lending Guidelines, alongside the Digital Personal Data Protection (DPDP) Act. Regulation evolves — our calling policy, disclosures and grievance mechanisms are reviewed against the current framework, and we welcome your compliance team auditing them before and during any engagement.
Send your compliance checklist
We'd rather your risk team interrogate us early. Share your vendor due-diligence requirements and we'll respond point by point.