Manual and Policies of SCPADI

CNBV Policies
Page 1 of 4
Policies for the use of the System for the Consultation of Payments and Debts of Rights via Internet SCPADI

CNBV Policies
Page 2 of 4
Introduction
The SCPADI is a support tool for financial entities, created with the intention of providing immediate knowledge of payments made, debts, calculation of accessories, among others, as well as obtaining the Help Sheet, the reference key, and the chain of the dependency, which are required to make the payment. Whenever necessary and as the Portal evolves, this document will be updated and posted again on the Internet, in the Policies and Procedures section, where the current and most updated version will always be located. All comments, suggestions, corrections, and requests related to these policies must be sent to:
csanchez@cnbv.gob.mx
Definitions
For the purposes of this policy, the following definitions will be used:
User: refers to any other natural or legal person who has been authorized and registered by the CNBV to use the System.
SCPADI: System for the Consultation of Payments and Debts of Rights via Internet.
Entity: All entities subject to the supervision of the National Banking and Securities Commission.
Fees: Are the inspection and surveillance fees and other rights, products, and revenues that will be applicable to supervised institutions.
Debts: Refers to overdue fees pending payment.
Payments: Are the credits made by the Entities. e5cinco: Is an electronic scheme for the payment of rights, products, and revenues (DPA's), via Internet and bank counter. Regarding the limitation of the CNBV's liability The SCPADI is offered with the aim of facilitating the consultation of generated debts and payments. In this offer of Facilities, the CNBV does not assume any responsibility towards the Entity.

CNBV Policies
Page 3 of 4
The information contained in the System will have a delay of 48 hours.
In the event of a discrepancy between the information in the system and the calculations resulting from the FEDERAL LAW OF RIGHTS, the latter shall prevail.
Regarding the SCPADI system
In view that Electronic Communications may, in some fortuitous event, be intercepted by third parties, the Organization cannot guarantee the confidentiality of information sent and/or received through this medium. Access keys consist of two parts: one is the user account and the other is the password, so the accounts will be personal. Any user registered in the SCPADI will be responsible for protecting their username, password, and data from any unauthorized access. The Entity is responsible for its access key. No password must be disclosed, written, sent by email, or shared by any other person outside the user, as this is considered a violation of information security; the account will be suspended, and an informative letter will be sent to the head of the Entity. The user is responsible for the actions carried out in the Entity's account, that is, the modifications to the databases. The identifications and entry keys to the SCPADI are the property of the CNBV. These identifications and keys are for the strictly personal use of the User to whom they are assigned, and therefore the responsibility for the correct use of them falls exclusively on the User themselves. Powers and duties of the CNBV Attention to requests for the registration and deregistration of users of the System. It will be the responsibility of the CNBV to register and control the rights and inspection and surveillance fees paid by Supervised Entities.

CNBV Policies
Page 4 of 4
Powers and duties of the Entities
It will be the responsibility of the Entities to keep their data updated in the system.
In the event of an employee's deregistration, they must notify in writing for their deregistration from the system.
Only one user can be registered per entity.
It is the responsibility of the Entities to calculate their inspection fees, as well as the accessories.
Non-compliance
The Organization will hold the User responsible for knowing this Policy and the consequences that would derive from its non-compliance. Likewise, the User must know these policies from their entry into the System.