Institutional procurement · Third-party risk

Vendor Due Diligence (VDD)

Information for banks, financial institutions and other organisations evaluating RegTech Nexus AI for a defined service scope. This page is an access-request channel, not a secure document repository or an assertion that every listed control or document is already implemented.

Controlled request processPublic request pageVersion 1.0

1. Controlled information register

Subject to availability, relevance, verification and appropriate authorisation, the following information categories may be considered for disclosure during a formal evaluation.

Disclosure subject to verification

Module A · Entity & governance

Applicable corporate particulars, governance responsibilities, service ownership and operational-continuity information.

Disclosure subject to verification

Module B · Information security & privacy

Service-specific data flows, data classification, access boundaries, retention and deletion arrangements, and relevant security documentation.

Disclosure subject to verification

Module C · Methodology & model boundaries

Service scope, source methodology, assumptions, limitations, quality checks and human-review arrangements where applicable.

Template / engagement-specific

Module D · Contractual documents

Relevant draft service terms, confidentiality provisions, data-processing terms and service-level commitments for review and negotiation.

A category listed above is not a representation that a certification, audit report, penetration test, formal BCP exercise, DPA execution or specific technical control exists. Each item will be accurately described as available, in preparation, not applicable or unavailable during the review.

2. Request institutional access

To request a VDD discussion or dossier review, send a written request from your institutional email address. Requests are reviewed manually. A business email domain is preferred; additional verification may be required where the sender's authority or institutional affiliation cannot be established from the request alone.

Do not attach confidential documents. Do not send customer records, account numbers, transaction data, credentials, supervisory-confidential information or internal security findings in the initial request. No file upload is provided on this static page.

Include the following in your email:

  • Institution name and official website domain.
  • Your name, role and institutional email address.
  • Service under evaluation: Policy Gap Analyzer, TradeGuard, ICMS Toolkit or general vendor review.
  • Purpose and expected scope of the assessment.
  • Whether an NDA or institutional authorisation process applies.

The link opens your email application with a request template. It does not submit data automatically, verify the sender, create an account or grant access. The official email address is [email protected].

3. Review and disclosure process

  1. Request received: the institution submits a written request with non-confidential identifying details.
  2. Verification: institutional affiliation, requester authority and evaluation purpose are reviewed.
  3. Scope confirmation: relevant services, requested documents, confidentiality requirements and availability are confirmed.
  4. Controlled disclosure: approved materials may be shared through a separately selected channel appropriate to the sensitivity and agreed terms.
  5. Follow-up: questions, clarifications and any agreed commitments are documented in writing.

Do not assume that an emailed request creates a service contract, establishes an SLA, or guarantees dossier access. No password-protected dashboard or automated identity-verification system is provided by this static page.

4. Service boundaries

VDD responses are scoped to the service being evaluated and to evidence actually available. A public website review or document pack does not replace the institution's own TPRM assessment, security testing, legal review, outsourcing assessment or regulatory notification obligations.