Compliance

At Fidelity Matters Consulting, we are committed to maintaining the highest levels of data security, confidentiality, and operational compliance. We partner with financial advisory practices, wealth managers, and corporate firms by providing dependable, high-integrity back-office and administrative support.

1. Service Scope & Regulatory Boundary

Fidelity Matters Consulting operates strictly within an outsourced administrative and practice-support capacity:

• ✓ We do not provide personal or general financial product advice, investment management, or retail financial advisory services.
• ✓ We do not hold an Australian Financial Services Licence (AFSL) and are not registered as investment advisers under SEBI.
• ✓ All reports, summaries, draft reviews, and compliance documentation prepared by our team are strictly administrative deliverables intended solely for the review, validation, and sign-off of our clients' licensed practitioners.

2. Data Privacy & Cross-Border Frameworks

Because we support practices across multiple jurisdictions, our operational protocols align with relevant statutory data protection frameworks:

• ✓ India: Digital Personal Data Protection (DPDP) Act, 2023.
• ✓ Australia: Privacy Act 1988 and the Australian Privacy Principles (APPs), specifically APP 8 (Cross-Border Disclosure) and APP 11 (Security of Personal Information).
• ✓ United Kingdom & EU: UK GDPR and EU General Data Protection Regulation (GDPR).

All client personal data is processed strictly within client-authorized cloud environments under a "Zero Local Storage" architecture, protected by multi-factor authentication and role-based permissions.

3. Confidentiality & Access Security

Client files and financial records entrusted to us are treated with strict confidentiality:

• ✓ Contractual Safeguards: Every employee, analyst, and contractor executes binding non-disclosure and confidentiality agreements prior to onboarding.
• ✓ Least-Privilege Access: Team members are granted access only to the specific client portals, files, and tools necessary to complete assigned administrative tasks.
• ✓ Encrypted Endpoints: Work is performed strictly on company-managed devices protected by BitLocker full-disk encryption, active endpoint protection, and automatic security updates.

4. Anti-Money Laundering (AML) & Know Your Client (KYC) Support

Where our administrative tasks involve gathering data or preparing forms for client onboarding, our teams operate in accordance with international Anti-Money Laundering (AML) and Know Your Customer (KYC) guidelines, assisting client practices in meeting their domestic compliance obligations.

5. Business Continuity and Incident Management

We maintain comprehensive business continuity and disaster recovery measures:

• ✓ Local Operational Resilience: Redundant high-speed internet with mobile failover, continuous power backup/inverters, and spare pre-configured hardware.
• ✓ Breach Notification Protocol: A documented incident response framework committing to written notification to client practices within twenty-four (24) hours of any confirmed security or data incident.

6. Contact Us for Compliance Inquiries

For inquiries regarding our compliance posture, data handling standards, or operational policies, please feel free to reach out to us via the contact page on our website.