Back

What types of information should not be submitted to GRA?

Participants should not submit information to GRA that they are not authorized to share, that belongs to a third party, that is legally restricted, that could create financial-services misuse, or that should only be reviewed inside a separate formal process. 

In general, do not submit: 

customer, client, borrower, policyholder, patient, citizen, employee, or personally identifiable data; 

material non-public information; 

confidential supervisory information; 

non-public regulatory information; 

restricted government or public authority information; 

confidential underwriting files; 

sensitive investment records; 

lending files or credit committee materials; 

deal terms, pricing, transaction documents, term sheets, or securities offering materials; 

confidential procurement information; 

trade secrets or proprietary business information unless cleared for submission; 

classified, protected, restricted, export-controlled, or security-sensitive information; 

cyber vulnerability details that could create operational risk; 

personal data that is not required for onboarding or participation; 

information subject to legal privilege unless authorized by counsel; 

confidential information from another organization without permission. 

GRA is a finance-readiness, insurance-readiness, capital-readability, and stewardship environment. It is not a data room for uncontrolled confidential information, not an investment bank, not an insurer, not an underwriter, not a lender, not a securities platform, not a regulator, not a procurement authority, and not a substitute for formal diligence. 

A safe rule is: if you would need legal, compliance, employer, client, customer, regulator, board, investment committee, underwriting, credit committee, or public authority approval to share it, do not submit it until that approval exists and the correct controlled pathway has been confirmed. 

Have questions?