The challenge
To comply with SEC regulations mandating data retention for years after a transaction, Kairos must preserve logs of written correspondence, decisions made, deal particulars, and legal documents for banks or escrow agents. Those records also need to be organized so the IT team, who are often the ones asked to locate a given file, can get to them easily.
Kairos chose Prodeal to support its agile deal-closing approach and centralize documentation. But routing that information through a third-party platform introduced compliance risk, so satisfying their security and data control requirements needed an additional layer of functionality.
How they used Prodeal
Prodeal collaborated with the Kairos IT and compliance teams to develop a bespoke solution consolidating all records within Prodeal into a single location firmly under the compliance team's control. It integrated into the existing Office 365 compliance framework in a way that was efficient, easy to administer and watertight from a compliance standpoint.
Before development began, Prodeal completed the standard Kairos vendor security assessment, covering infosec governance, access control, incident management, facility security, remote access, directory services, network connectivity, backup and recovery, servers and storage, and alerting and monitoring. It passed all third-party security requirements.