Policies live in SharePoint, procedures in shared drives, and approvals in someone’s inbox. Somewhere in there is a borrower’s Social Security number pasted into a loan procedure. There are two versions of the overdraft policy left over from the merger, and both still show up in search.
None of it was intentional, but most of it stays invisible until an examiner asks for it.






