Role-based access
Customer information and documents are intended to be visible only to authorised users whose responsibilities require access. User permissions can be changed or withdrawn when roles change.
SECURITY BY DESIGN
Your financial information deserves disciplined protection.
Trust in lending depends on more than advice. ACS has designed its technology and operating processes around restricted access, responsible document handling and clear accountability.
◆Customer data protectionBuilt into the ACS operating model
Technology powered by ACS Technology Platform
Technology powered by ACS Technology Platform
HOW ACS APPROACHES SECURITY
Practical safeguards across the customer journey.
These principles guide the production design of the ACS CRM, portal, document repository and operating procedures.
Controlled document handling
Documents are collected for an identified lending purpose and maintained within controlled digital workflows rather than being distributed through unmanaged channels.
Secure transmission and storage
The ACS portal uses secure HTTPS connections. Production information and documents remain within restricted cloud services with managed access.
Activity accountability
The CRM records important user and case activity so that access, status changes and document movement can be reviewed when required.
Purpose-limited sharing
Information should be shared only with relevant authorised lenders, service providers or channel partners when required to evaluate or process the customer’s request.
Backup and recovery
Production architecture includes planned database and document backups so that business records can be restored after an operational disruption.
PROTECT YOURSELF
ACS will never ask for your confidential banking credentials.
- Never share an OTP, UPI PIN, ATM PIN, card CVV or banking password.
- Verify the recipient and purpose before sending financial documents.
- Report unexpected requests or suspicious communication to ACS.
CUSTOMER CONTROL
Information should remain connected to a clear purpose.
Customers may request correction of inaccurate information, withdraw marketing consent or ask about deletion where retention is not required for an active case, record-keeping or applicable law.
Read the privacy notice →HONEST SECURITY POSITION
No inflated certification claims.
ACS will describe only the controls actually deployed. Formal certifications or regulatory-compliance claims will be published only after the relevant independent assessment or legal review.
Production access, backups, restoration steps and user permissions will be reviewed and tested as the operational platform expands.