Agent library / Compliance and risk / Breach notification (Reg S-P)
Breach notification (Reg S-P)
If a data incident happens, PitCrew works through your incident playbook, keeps the clock on notice deadlines and drafts the notices. Every decision stays with your team.
When it runsWhen an incident is reported
Who approvesCompliance and the COO
Works withYour incident playbook, email
How it works
4 steps. A person decides at the end.
- Opens the playbookSteps and owners
- Keeps the clockNotice deadlines
- Drafts noticesClients and service providers
- A person approvesTeam decidesWhether and when to notify
What it reads and what it produces
Reads
- Your incident playbook
- Incident details
Produces
- A checklist with deadlines
- Draft notices
- A record of decisions
Rules it follows
- Never sends noticesYour team decides and sends.
- Keeps every decisionWith date and owner.
Questions firms ask
Last updated: October 2026
How long does it take to set up?
5 working days from data access to the first production run. PitCrew experts connect your systems and enter your firm's rules.
More in Compliance and risk
See all of Compliance and risk →
Document review, ADV consistencyChecks Form ADV Part 1, Part 2 and your actual practice against each other before you file.Communication reviewReviews flagged emails and messages and routes the real issues to compliance.Policy change impact reviewWhen a policy or rule changes, finds the documents and processes that now need updating.Branch auditPrepares and works through branch office inspections and drafts the findings.Policy and regulation Q&AAnswers routine staff questions from your firm's policies, with the section cited.Compliance calendarKeeps every filing and recurring task on the calendar, and reminds owners ahead of each deadline.Supervision and escalationLogs issues that need supervision and routes each one to the right person with a deadline.SEC exam readiness checkChecks your records against what examiners commonly request and lists the gaps.Exam and audit response packageMaps each request on an exam or audit list to your records and assembles the response.Compliance evidence reportsTurns your agents' run history into reports organized by policy area.Annual compliance reviewAssembles the year's testing and findings into a draft annual review report.Vendor security reviewTracks vendors with client data, reads their security reports and flags exceptions and expiries.Disaster recovery test recordsKeeps the records of your disaster recovery and backup tests, and flags tests that are overdue.Cybersecurity policy auditChecks your written cybersecurity policies against the rules and your own procedures.
Don't see your work?
Tell us the taskWe build it with you, from data access to the first production run in 5 working days.