Credium
Compliance

Compliance Controls, Built In

Debt collection is one of the most heavily regulated categories of consumer-facing software. The controls below are enforced in the product itself, not left to policy documents alone.

What's Enforced

Product-Level Controls

Contact-Window Enforcement

Every tenant configures allowed contact hours per jurisdiction. Collectors and automated collection rules are both blocked from acting outside that window β€” it isn't just a policy on paper.

Disclosure & Audit Logging

Required disclosures are logged, and every meaningful staff action against a debtor record β€” status changes, payments, communications β€” is captured in an exportable audit trail.

Dispute & Bankruptcy Freezes

Filing a dispute or a bankruptcy notice on an account immediately blocks further collection activity against it, across every channel, until resolved.

Encrypted Sensitive Data

National ID numbers and other sensitive identifiers are stored encrypted, never in plain text, and only ever partially revealed in the UI unless a staff member explicitly requests the full value.

Access & Session Controls

Configurable IP allowlisting, rate limiting, and session-timeout policy per tenant, enforced platform-wide rather than left to individual configuration drift.

Payment Data Isolation

Card details are entered directly into the connected payment gateway's own hosted interface β€” raw card numbers never pass through or get stored on our application servers.

A Shared Responsibility

What We Handle vs. What You Configure

The Platform Provides

  • β€’ Encrypted storage of sensitive identifiers
  • β€’ Audit logging infrastructure
  • β€’ Enforcement of configured contact windows
  • β€’ Payment data isolation via gateway integrations
  • β€’ Dispute/bankruptcy collection freezes

Each Tenant Configures

  • β€’ Permitted contact hours for their jurisdiction(s)
  • β€’ Required disclosure text per communication type
  • β€’ Log retention windows consistent with local law
  • β€’ Their own payment gateway account and terms
  • β€’ Staff access levels and IP allowlists

This page describes product capabilities that support compliance efforts; it is not a substitute for your own legal review of applicable debt-collection regulations in your jurisdiction.

Have a Specific Compliance Question?

Talk to our team about how the platform's controls map to your jurisdiction's requirements.