Adyen-for-platform icon

Keeping records

Learn about the guidelines for keeping records regarding financial products.

The information in this page does not constitute legal advice. It only provides an overview of Adyen's compliance guidelines for financial products and Adyen for Platforms (referred to as the Compliance Guidelines). For additional, non-legal clarifications about this content, reach out to your Adyen contact.

While you offer financial products to your users, your platform must keep detailed records regarding your service. Your platform must keep these service records for at least five years after the termination of the financial products offering (unless your platform's internal data retention requirements indicate a longer timeframe.)

Types of records

Record type Examples
User experience Screenshots of deployed versions of the financial product, application flow, user dashboard, support pages
Marketing All versions of materials described in Marketing communications.
User communications and complaints Email or website messaging interactions (for example chat or customer support) and documentation related to complaints. Notifications to customers of action taken for loans and charge cards.
(UK and IE only)Vulnerable customers: The systems for recording details of customer communications must include the ability to categorise customers as showing signs of vulnerability during an interaction and should include at least the following categorisation options:
  • Health: Physical or mental health conditions that impact a customer's ability to manage their affairs. This could include emotional distress, or any other conditions that means they may require additional support.
  • Life Events: Significant life changes such as bereavement, job loss, or relationship breakdown that can affect resilience and decision-making.
  • Resilience: Low ability to withstand financial or emotional shocks.
  • Capability: Low levels of financial literacy, confidence in managing money, or other relevant skills such as digital literacy.

Any communications received from a vulnerable user must be accessible (in accordance with legal requirements) to the staff of the platform responsible for assisting users.
Statements Historical statements generated and made available to users

See also