FAQ
Questions before you scope
Straight answers about who we serve, what access we need, and how pricing works on this site.
-
Who are these audits for?
Payment businesses operating in or from Hong Kong — wallets, processors, acquiring platforms, and e-money teams that must prove how long they keep transactional and customer records, and how they dispose of them.
-
Do you delete data for us?
No. We audit schedules, controls, and evidence. Engineering changes and vendor purge jobs stay with your team or your providers. We can review remediation after you act.
-
What access do you need?
Read-only policy documents, sample retention configs, purge logs, and interviews with compliance and platform owners. We do not require production write access.
-
Is pricing on this site a checkout?
No. Figures are informational starting points in Hong Kong dollars. We confirm scope and fee in a written proposal. No payment is processed on this website.
-
How soon can you start?
Most engagements begin within two to three weeks of signed scope, depending on calendar load. Contact us with your payment stack and the exam or partner deadline you face.
-
Do you cover personal data only?
We cover payment-business retention broadly: customer identity, transaction history, dispute files, AML artefacts, and operational logs that feed those records — scoped to what you ask us to examine.