Akontec handles other organisations' customers, other organisations' data, and other people's money. Compliance failure in any of those does not just cost a penalty — it ends the client relationship and, in a marketplace business, damages every other client's confidence at the same time.
Applies to all Akontec employees, contractors and interns, and to every partner delivery centre and vendor handling Akontec or client work.
| Role | Responsibility |
|---|---|
| Director | Ultimate accountability; sole authority on regulatory responses |
| Function Head — Finance & Compliance | Day-to-day ownership of the compliance programme |
| Delivery Managers | Compliance on their campaigns, including at partner sites |
| Every employee | Following the policies and reporting breaches immediately |
| Partners | Contractual compliance obligations under the MSA and DPA |
| Domain | Policy |
|---|---|
| Data protection and privacy | 02_Data_Protection_Policy.md |
| Information security | 03_Information_Security_Policy.md |
| KYC and anti-money-laundering | 04_KYC_And_AML.md |
| Business continuity | 05_Business_Continuity_And_DR.md |
| Records and retention | 06_Document_Retention.md |
| Statutory and tax | 02_Legal/01_Statutory_Registrations.md |
| Employment and workplace | 16_HR/02_Employee_Handbook.md |
| Communication and claims | 27_Guardrails/ |
Akontec states only certifications it actually holds, with certificate numbers and validity dates, in 01_Company/10_Certifications_And_Awards.md. Where a certification is in progress, we say "in progress" and give the stage. Where we do not hold one, we say so.
Claiming an ISO certification we do not hold is treated as a terminable offence, not a marketing enthusiasm. Clients audit this, and being caught destroys credibility on everything else we have said.
Where a client's requirement genuinely needs a certification we lack, we say so and either work to the standard under their audit, or decline. Both are better than the alternative.
Any employee or partner may report a compliance concern to their Function Head, to Finance & Compliance, or directly to the Director. Reports may be made without going through a reporting line. Retaliation against anyone raising a concern in good faith is itself a serious disciplinary matter.
Self-reporting a mistake promptly is treated substantially more leniently than concealment. This is stated in the handbook and it is meant — the alternative is a culture where breaches surface only when the client finds them.
Statutory obligations sit on a dated calendar with named owners (02_Legal/01_Statutory_Registrations.md). Internal compliance reviews are conducted on a stated cycle. Partner sites are audited per 18_Vendors/03_Vendor_Agreement_Terms.md — on notice routinely, and without notice where an incident is suspected.
No misrepresentation to a client, candidate, partner, investor or regulator · no falsified reporting · no shared logins · no customer data outside approved systems · no cash · no guaranteed-return language · no certification claim we cannot evidence · no concealment of an incident.
Registration is free. Browse every live project with its scope, seats and payout, then apply to the ones that fit.
Register free See live projects