Risk Assessments

Hello,

Our bank uses TeamViewer for the purpose of remotely assisting our Bank clients with troubleshooting issues and training on online Banking, Wires, etc. 

My question is should we consider TeamViewer as having access to our clients NPI? in the past we have, but now I am questioning that.

Any input from the community will be greatly appreciated.

Not a TeamViewer user but here's a way to think about it. Does the application retain the data when the assist session is closed? 

Ultimately, you're accessing data that you already see. (Possibly, that's why you're second guessing.) That's not the issue. The issue is: Does the Third Party have the ability to see/retain/use that data?

Good luck.

Thank you so much for your input.