Skip to content

Bank detail changes

Every change to a payout or payee bank is confirmed through a second channel, waits one business day, and notifies every owner.

Satisfies

CriterionText
SOC2 CC6.1The entity implements logical access security software, infrastructure and architectures over protected information assets.

Implemented by

Test

StepRule
KindPreventive: it stops the failure before it happens.
SelectEvery change to a payout or payee bank in the report period.
AssertEach change has a second-channel confirmation, a completed delay window, and notices to every owner and the old address.

Owner

Treasurer, Finance Team.

Example

A Supplier’s email asks a translation marketplace to pay their earnings to a new bank. The Treasurer Agent calls the number already on file, the Supplier denies sending it, and the change is refused before the window closes.