Asia Pacific | Financial services

HKMA Outsourcing SA-2

The Hong Kong Monetary Authority (HKMA) is the central banking institution in Hong Kong. It is responsible for supervising authorized institutions (AIs) with the aim of promoting stability and integrity of the financial system, including the banking system.

HKMA Outsourcing SA-2 outlines the HKMA's supervisory approach to outsourcing and the recommendations for AIs to address when outsourcing to third parties.. HKMA Outsourcing SA-2 provides specific guidance on outsourcing agreements, customer data confidentiality, control over outsourced activities, contingency planning, access to outsourced data and overseas outsourcing.

Google Cloud's contracts for AIs in Hong Kong address the contractual requirements in HKMA Outsourcing SA-2. We have also created mappings to the guidelines for both GCP and Google Workspace to assist you with understanding how we can support you with meeting the requirements and assess us as an outsourced service provider. Google Cloud is committed to addressing these requirements regardless of how AIs choose to use our services.


ISO/IEC 27001

Learn more

ISO/IEC 27017

Learn more

ISO/IEC 27018

Learn more