Skip to content
attpro
Book a demo

Compliance hub

The rules, and where each one is enforced

Indian collections is governed by RBI conduct expectations, the DPDP Act, TRAI's messaging regime and the statutory recovery process. This page maps each to the control that enforces it on the platform, with a plain-language explainer where one exists.

The map

Six regimes, six controls

Not legal advice. Each row describes how the platform behaves; your obligations as a regulated entity or its agent remain your own.

RBI Fair Practices Code

Reasonable hours and places, no harassment, disclosure of the lender and the debt, a grievance process. On the platform: calling windows in IST at dispatch, frequency caps, recording disclosure, a named grievance officer.

Quiet hours, explained

DPDP Act, 2023

The lender is the data fiduciary; we are the processor on written instructions. Consent state, retention schedules, erasure and legal hold are system properties with an audit trail.

Ten-question readiness checklist

TRAI DLT

Every SMS template is bound to a TRAI DLT registration before it can be sent. Unregistered content cannot be dispatched, and the header is the lender's.

How messaging binds templates

RBI outsourcing and DRA norms

People who recover on a lender's behalf hold the IIBF Debt Recovery Agent certification and are police-verified. Conduct is trained for the lowest escalation rate and audited internally every cycle.

The six conduct controls

SARFAESI and the recovery track

Secured recovery follows the statutory notice periods; the ladder only reaches repossession, auction or filing when the earlier tiers have run, and every step is a recorded channel.

Legal and recovery channels

Evidence the auditor can check

Recording, transcript, receipts, geo-tags and dispositions written as they happen, on a hash-chained log with a Merkle anchor. A changed record breaks the chain and shows up.

Security and the evidence chain

People controls

For managed and hybrid engagements

Where our people work your book, they are part of the control surface. Six controls, audited internally every cycle.

DRA-certified employees

Every caller and field officer holds the IIBF Debt Recovery Agent certification before they work an account.

Police clearance before hiring

Background screening with a mandatory Police Clearance Certificate, for the floor and the field.

Training for the lowest escalation rate

Outbound call training is measured on complaints avoided, not calls made.

Timelines enforced in software

Calling and field-visit windows are gates in the dialer and the FOS app, not lines in a policy document.

Periodic refresher training

Every employee re-trains on RBI conduct expectations on a fixed cycle.

Internal audit controls

Conduct, recordings and dispositions are sampled and audited internally every cycle.

Explainers

Working notes on the rules

Written to be useful whether or not you buy anything. No forms in front of any of it.

The vocabulary, defined

Send us the questionnaire.

The fastest way to evaluate a vendor's compliance posture is to make them fill in yours. We answer in writing, and the answers match this page.