Does the agreement include a “survivorship clause” specifying which provisions remain enforceable post-termination (e.g., NDAs, non-solicits)?

When drafting or reviewing agreements in the remittance business, one critical yet often overlooked provision is the survivorship clause. This clause explicitly states which contractual obligations remain enforceable after the agreement terminates—essential for protecting sensitive data, client relationships, and proprietary processes.

In cross-border money transfer operations, confidentiality is paramount. A robust survivorship clause ensures that NDAs, data privacy commitments, and compliance-related warranties (e.g., AML/KYC adherence) survive termination. Without it, a terminated partnership could expose your remittance platform to reputational risk or regulatory penalties if former partners misuse shared customer or transaction data.

Non-solicitation clauses are equally vital. Remittance firms invest heavily in trained staff and client portfolios; survivorship language prevents ex-partners from poaching agents, correspondents, or end-users for a defined period post-termination—safeguarding operational continuity and market position.

Regulatory scrutiny of remittance service providers continues to intensify globally. Including clear, enforceable survivorship terms not only strengthens legal defensibility but also signals due diligence to regulators and financial institution partners. Always consult legal counsel familiar with both local financial regulations and international payment frameworks when tailoring this clause.

Don’t wait until a contract ends to discover gaps. Audit your remittance agreements today—ensure survivorship provisions are explicit, reasonable in scope and duration, and aligned with your risk management strategy.

How does the agreement delineate responsibilities between Citi employees and third-party vendors (e.g., program managers) handling corporate card data?

When managing corporate card data in remittance operations, clarity on responsibilities between Citi employees and third-party vendors—such as program managers—is critical for compliance and security. Citi’s agreement explicitly delineates accountability: internal staff retain oversight, governance, and ultimate liability for data protection, while vetted vendors assume defined operational duties under strict contractual obligations.

The agreement mandates that third-party vendors comply with PCI DSS, GDPR, and Citi’s internal Information Security Policy. Vendors may process or store cardholder data only within approved environments and must undergo annual audits and real-time monitoring. Citi employees, conversely, are responsible for vendor selection, continuous risk assessment, and enforcing remediation for any control gaps.

For remittance businesses relying on Citi-issued corporate cards, this structured division reduces exposure to breaches, fines, and reputational harm. It ensures seamless cross-border payments while maintaining audit-ready transparency—key for regulators and enterprise clients alike. Clear role demarcation also accelerates incident response, as escalation paths and remediation ownership are pre-defined.

Ultimately, Citi’s framework empowers remittance providers to scale securely, knowing data-handling responsibilities are not just assigned—but contractually enforced, monitored, and aligned with global financial standards.

Are U.S. employees required to complete annual compliance certifications tied directly to obligations outlined in this agreement?

For remittance businesses operating in the United States, compliance is non-negotiable—and annual compliance certifications are a critical component. While the Bank Secrecy Act (BSA), FinCEN regulations, and state money transmitter licensing laws don’t mandate a *single, universal* “annual certification” document, many U.S. regulators—including state licensing authorities and federal examiners—expect firms to implement formal, documented annual compliance training and attestations.

Employees handling transactions, AML monitoring, or customer due diligence are often required to complete annual compliance certifications confirming they understand their obligations under the company’s AML program, OFAC sanctions screening protocols, and applicable state and federal laws. These certifications directly tie to obligations outlined in internal compliance agreements, licensing conditions, and regulatory consent orders.

Failing to enforce such certifications exposes remittance providers to enforcement actions, fines, or license revocation. Leading firms integrate certifications into HR onboarding and annual review cycles, using them as both accountability tools and audit-ready evidence of a culture of compliance.

Pro tip: Customize certifications per role—compliance officers, frontline agents, and operations staff face distinct regulatory responsibilities. When aligned with your firm’s written compliance agreement, these annual attestations strengthen regulatory trust and operational resilience.

What notice period (if any) must Citi provide before unilaterally modifying material terms of the agreement for existing U.S. employees?

For remittance businesses partnering with Citi—or employing U.S.-based staff under Citi’s service agreements—the notice period for unilateral modifications is a critical compliance and operational consideration. Citi’s standard U.S. employment and service agreements typically require at least 30 days’ written notice before implementing material changes to terms affecting existing U.S. employees. This aligns with common industry practices and reflects principles of fairness and regulatory expectations under U.S. labor norms.

While Citi’s specific contractual language may vary by agreement type (e.g., vendor contracts vs. direct employment), the 30-day notice serves as a de facto benchmark—ensuring affected parties have reasonable time to assess implications, seek counsel, or adjust operational workflows. Remittance firms relying on Citi’s infrastructure, payroll integrations, or compliance support must monitor such notices closely to avoid service disruptions or compliance gaps.

Importantly, “material terms” may include compensation structures, data handling obligations, reporting requirements, or dispute resolution mechanisms—all highly relevant in cross-border remittance operations subject to FinCEN, OFAC, and state money transmitter regulations. Proactive contract review and relationship management with Citi help remittance providers maintain continuity, mitigate risk, and uphold licensing commitments. Always consult legal counsel to verify notice provisions in your specific agreement.

Does the agreement incorporate by reference Citi’s Global Code of Conduct or U.S.-specific ethics policies—and if so, how is precedence established?

For remittance businesses partnering with Citibank, understanding how ethics policies integrate into service agreements is critical for compliance and operational integrity. Citi’s Global Code of Conduct (GCC) serves as the foundational ethics framework across all jurisdictions—including those handling cross-border money transfers.

The agreement typically incorporates the GCC by reference, meaning its principles—such as anti-bribery, data privacy, and fair treatment of customers—are legally binding under the contract. In the U.S., supplementary requirements from Citi’s U.S.-specific ethics policies (e.g., adherence to OFAC sanctions, FinCEN reporting standards, and state-level money transmitter laws) may also apply where local regulations impose stricter obligations.

Precedence is clearly established: when conflicts arise between the GCC and jurisdiction-specific policies, the more stringent standard governs. U.S.-specific rules take precedence in domestic operations, while the GCC remains paramount internationally—unless local law mandates otherwise. This dual-layered approach ensures remittance providers meet both global ethical expectations and hyper-local regulatory mandates.

Transparency in policy incorporation strengthens trust with regulators, partners, and end-users. Remittance firms should proactively audit their internal controls against both frameworks—and confirm contractual language explicitly references applicable versions of the GCC and U.S. policies. Doing so mitigates enforcement risk and reinforces a culture of accountability in high-volume, high-compliance financial services.

 

 

About Panda Remit

Panda Remit is committed to providing global users with more convenient, safe, reliable, and affordable online cross-border remittance services。
International remittance services from more than 30 countries/regions around the world are now available: including Japan, Hong Kong, Europe, the United States, Australia, and other markets, and are recognized and trusted by millions of users around the world.
Visit Panda Remit Official Website or Download PandaRemit App, to learn more about remittance info.