Security, data and compliance in ATM & Cash Logistics Optimizer

How ATM & Cash Logistics Optimizer protects data and supports your compliance obligations.

Security controls

Single sign-on

Staff sign in through your identity provider, so your password and multi-factor policies apply.

Role-based access

What each person can see and do follows their role and region; preparing an order is separate from approving it.

Restricted schedule information

Delivery dates and times are visible only to the roles that need them, supporting your physical security program.

Encryption and keys

Client data is encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.

Complete audit trail

Every forecast change, order, approval, export and discrepancy decision is logged with the person and time, and cannot be edited.

Data residency

Data stays in the hosting region you choose: the United States, the United Kingdom or Australia.

Requirements it supports

• Bank Protection Act (12 U.S.C. 1881 et seq.) and security program rules (12 CFR 208.61, 12 CFR Part 326, 12 CFR Part 748)
• Federal Reserve Operating Circular No. 2, Cash Services
• Interagency Guidance on Third-Party Relationships: Risk Management
• Interagency Policy Statement on Funding and Liquidity Risk Management
• Interagency Guidance on Model Risk Management (SR 11-7)
• FFIEC IT Examination Handbook, Business Continuity Management booklet

The product supports these requirements; meeting them remains your organization's responsibility.

Where it runs

• Moraph cloud: Hosted and operated by Moraph in the United States region. United Kingdom and Australia regions are available for institutions outside the US.
• Dedicated environment: A single-tenant environment for institutions whose policies require isolation, scoped in the proposal.
• With a managed service: Optionally run alongside a Moraph managed service for parameter tuning support and platform administration.

Limitations

• Moraph does not hold, move, store or insure cash. Orders are fulfilled by your carriers, cash providers and Federal Reserve Bank or correspondent under your own agreements.
• The Optimizer recommends orders; your staff approve them, and orders above your thresholds need a second approver.
• Forecasts depend on the completeness and quality of the device and branch data you provide, and cannot anticipate events nobody records.
• It does not monitor ATM hardware or dispatch technicians; it uses device status from your existing monitoring system.
• It does not place orders with the Federal Reserve directly; it produces the quantities your team orders through the channel you already use.
• It does not settle or reconcile ATM network transactions or handle cardholder disputes.
• Holding limits, order thresholds and the cost-of-funds rate are your institution's decisions; the Optimizer records and applies them.
• Physical security procedures for cash handling remain your institution's responsibility under its security program.