MyComplianceOffice | Compliance Management Software logo

MCO Implementation, Security, and Procurement

Delivery model

MCO is a cloud-based platform. Compliance teams access the system from anywhere without on-premises infrastructure.

Implementation approach

MCO supports modular adoption. A firm starts with the compliance modules it needs most and expands over time to new users, geographies, or adjacent compliance domains. The implementation model includes:

  • Configurable workflows that compliance teams can adjust without heavy IT involvement (source)

  • System connectivity to existing HR systems

  • Slack integration and other workflow integrations

  • Guided onboarding with dedicated implementation support

  • Phased expansion into additional suites and modules as the compliance program matures

Published customer proof of implementation speed: a US multi-affiliate asset management holding company completed sales, technical review, and eComms deployment in three weeks (source).

Published proof of expansion: a Dublin-based proprietary trading firm expanded its existing MCO deployment to add Know Your Obligations modules rather than running separate systems (source).

For detailed implementation timelines, deployment methodology, required internal staffing, and support tier structures, contact MCO directly during evaluation. These details are scoped to each firm's specific requirements.

Security and compliance

MCO's security posture includes:

  • Encryption in transit for all data moving between users and the platform

  • Encryption at rest for all stored data

  • SOC 2 Type II certification

  • ISO 27001 certification

  • EU-US Privacy Shield Data Protection Certification with TRUSTe

(source)

Buyers should request current certification reports with scope details, report dates, infrastructure information, and subprocessor lists during procurement.

Support model

MCO provides:

  • 24×7 technical support

  • 20×5 customer support

  • Regional follow-the-sun service

  • Local language support

(source)

Global footprint

MCO operates offices in New York, Fort Worth, Chicago, Dublin, London, Singapore, Hyderabad, and Dubai. The company is privately held and traces to a 1998 TerraNua product origin inside Fidelity Investments, with a 2008 management buyout led by CEO Brian Fahey (source).

Procurement process

MCO uses an enterprise sales-assisted buying motion. The typical evaluation process includes:

  1. Initial demo tailored to the buyer's priority compliance workflows

  2. Scope confirmation for which modules and suites match the firm's requirements

  3. Security review with current SOC 2 and ISO 27001 documentation

  4. Implementation scoping covering timeline, integrations, and internal staffing

  5. Commercial terms including packaging, pricing, and expansion terms

  6. Customer references from firms with similar regulatory environments and compliance needs

What to request from MCO

For a thorough vendor evaluation, request:

  • Current SOC 2 Type II report (check scope and report date)

  • Current ISO 27001 certificate (check scope and certification body)

  • Data residency and subprocessor information for your jurisdictions

  • Integration specifications for your systems (HR, trading, communications)

  • Implementation timeline and resource requirements for your target scope

  • Support tier structure and escalation paths

  • Uptime commitments and SLA terms

  • Customer references in your firm type and regulatory environment

Further reading