Direct Answer: What Is BPO and What Are the Main Types?

Business Process Outsourcing (BPO) is the practice of contracting specific business functions or operational workflows to specialized third-party service providers. Rather than operating as a single monolithic service, BPO encompasses a wide spectrum of functional departments, technical disciplines, and delivery models—ranging from basic data entry and inbound customer support to specialized legal abstractions and forensic financial underwriting.

Understanding BPO Classification: Types vs. Dimensions

Business Process Outsourcing does not follow a single, mutually exclusive list of types. A single outsourcing partnership can be categorized across multiple intersecting dimensions simultaneously. For example, an engagement can be simultaneously Back-Office (Function), Non-Voice (Channel), KPO (Cognitive Complexity), Offshore (Location), and structured as a Dedicated Pod (Delivery Architecture). Understanding these distinct axes allows business leaders to design operational partnerships aligned with their specific cost, security, and velocity requirements.

The 8 Most Common Departmental Types of BPO Services

  1. Customer Service & Technical Support (Front-Office): Managing inbound contact queues, omnichannel live chat, customer dispute resolution, and Tier 1–3 technical troubleshooting.
  2. Finance, Accounting & Bookkeeping (Back-Office): Handling general ledger reconciliations, accounts payable (AP), accounts receivable (AR), billing, and payroll processing.
  3. Data Entry & Document Processing: Converting physical documents and unstructured PDFs into digital database records, indexing files, and maintaining data cleanliness.
  4. Human Resources Outsourcing (HRO) & Payroll: Managing employee benefits administration, payroll calculations, compliance reporting, and candidate recruitment (RPO).
  5. Healthcare & Medical BPO: Executing medical coding, insurance claims processing, patient eligibility verification, and Revenue Cycle Management (RCM).
  6. IT-Enabled Services (ITES) & Technical Back-Office: Providing network monitoring, infrastructure management, software quality assurance (QA), and database administration.
  7. Knowledge Process Outsourcing (KPO & Financial Underwriting): Executing high-complexity analytical workflows including market research, financial modeling, credit risk assessment, and forensic statement scrubbing.
  8. Legal Process Outsourcing (LPO): Managing contract drafting, statutory compliance auditing, patent applications, and e-Discovery document review.

Key Operational Insights for 2026

  • Analytical Evolution: Enterprises are shifting transactional workflows from general virtual assistant models toward dedicated Knowledge Process Outsourcing (KPO) teams for domain-specific tasks.
  • Channel Diversification: Modern contact centers balance voice telephony with digital non-voice channels (chat, email, and automated ticket triage) to optimize customer resolution time.
  • Zero-Trust Data Security: Regulated industries mandate Virtual Desktop Infrastructure (VDI), role-based access controls (RBAC), and AICPA SOC 2 Type II compliance to prevent local data storage on remote devices.
  • Staffing Model Divergence: High-stakes workflows increasingly utilize dedicated staffing pods over multi-tenant shared pools to eliminate context switching and protect proprietary data.
The 6 Foundational Dimensions of Modern BPO Classification

1. By Function

Front-Office (Customer Facing) vs. Back-Office (Internal Operations)

2. By Channel

Voice BPO (Telephony) vs. Non-Voice BPO (Chat, Email, Data)

3. By Complexity

Standard BPO vs. KPO vs. LPO vs. RPO vs. ITES

4. By Geography

Offshore (Global) vs. Nearshore (Regional) vs. Onshore (Domestic)

5. By Scope

Horizontal BPO (Cross-Industry) vs. Vertical BPO (Industry-Specific)

6. By Architecture

Shared Multi-Tenant Pools vs. Dedicated Specialized Pods

1. Deconstructing the 6 Core Dimensions of Modern BPO

To construct an efficient, resilient operational architecture, business leaders must evaluate types of BPO services through a structured, multi-dimensional framework. BPO relationships are defined by six intersecting classifications:

  1. Functional Scope: Distinguishes direct external customer engagement (Front-Office) from internal process management (Back-Office).
  2. Communication Channel: Differentiates voice-based phone channels from digital non-voice data streams.
  3. Cognitive Complexity: Evaluates whether the process requires binary rule execution (BPO) or subjective analytical judgment (KPO).
  4. Geographic Location: Evaluates service center placement relative to labor availability, language compatibility, and legal jurisdiction.
  5. Industry Scope: Distinguishes cross-industry administrative capabilities (Horizontal) from deep industry-specific expertise (Vertical).
  6. Operating Architecture: Separates shared multi-tenant resource pools from dedicated, client-exclusive team pods.

Horizontal BPO vs. Vertical BPO

The distinction between Horizontal and Vertical BPO determines how tailored an outsourced operation is to a specific industry:

  • Horizontal BPO: Encompasses universal business functions shared across almost every commercial sector. For example, standard accounts payable processing, employee payroll calculation, and general receptionist call answering apply identically regardless of whether a company sells software or manufactured goods.
  • Vertical BPO: Encompasses specialized, industry-specific workflows that demand deep institutional fluency, regulatory compliance, and customized technical platforms. Examples include healthcare medical coding, insurance claims adjusting, and commercial lending underwriting.
Industry Sector Horizontal BPO Applications (Universal) Vertical BPO Applications (Industry-Specific)
Financial Services & Lending Standard accounts payable, payroll processing, general data entry Bank statement scrubbing, UCC-1 lien searches, credit memo assembly
Healthcare & Life Sciences General HR onboarding, basic customer phone routing ICD-10 medical coding, insurance pre-authorization, RCM billing
Legal & Compliance Office document filing, receptionist services e-Discovery tagging, contract redlining, regulatory disclosure audits
eCommerce & Retail Standard employee expense tracking Product catalog taxonomy, return logistics triage, fraud scoring

2. Functional Classification: Front-Office vs. Back-Office BPO

The foundational operational boundary in outsourcing separates Front-Office BPO from Back-Office BPO. Each category demands distinct operational governance models, technology stacks, and Key Performance Indicators (KPIs).

1. Front-Office BPO: Customer-Facing Engagement & Support

Front-office outsourcing manages operational touchpoints where external customers, clients, or partner brokers interact directly with your brand. These functions directly influence customer satisfaction (CSAT), Net Promoter Scores (NPS), and customer lifetime retention.

Core front-office workflows include:

  • Inbound Customer Support: Managing inquiries regarding account details, billing questions, order tracking, and product troubleshooting.
  • Outbound Telemarketing & Lead Generation: Executing structured sales outreach, qualifying prospective business leads, and setting appointments for domestic account executives.
  • Technical Helpdesk (Tier 1–3): Diagnostic software troubleshooting, system onboarding support, and escalation of engineering defects.

2. Back-Office BPO: Internal Operations & Data Integrity

Back-office outsourcing encompasses internal, non-customer-facing processes that sustain core enterprise operations. In transaction-heavy industries like commercial finance, banking, and insurance, back-office performance dictates process velocity, error containment, and regulatory compliance.

Core back-office workflows include:

  • Finance & Accounting Outsourcing (FAO): General ledger reconciliations, multi-entity accounts payable and receivable, and daily cash flow ledger updates.
  • Data Extraction & Indexing: Converting unstructured documents into structured database fields through deal-jacket data entry pipelines.
  • Compliance & File Auditing: Auditing transaction jackets, cross-referencing identity verification records, and logging regulatory audit trails.
Evaluation Criteria Front-Office BPO Back-Office BPO
Primary Objective Customer satisfaction, query resolution & brand engagement Operational velocity, data accuracy & process compliance
External Visibility Direct, customer-facing interaction (Phone, Chat, Email) Zero customer contact; internal system and workflow execution
Primary Metrics First Contact Resolution (FCR), CSAT, Average Handle Time Turnaround Time (TAT), Error Rate (<0.5%), Throughput Volume
Technology Stack Cloud telephony (VoIP), omnichannel ticketing, CRM platforms OCR engines, document management systems, core ERP databases
Primary Operational Risk Brand reputation impact and customer churn from poor communication Data inaccuracy, operational bottlenecks, and compliance violations

3. Communication Channel Classification: Voice vs. Non-Voice BPO

When selecting a BPO provider, organizations must evaluate the primary communication medium used to deliver the service. The market is split into Voice BPO and Non-Voice BPO.

1. Voice BPO Operations

Voice BPO relies on live spoken telephony. Agents interact in real-time with customers, borrowers, or business partners over telephone lines or cloud-hosted Voice over IP (VoIP) platforms.

  • Inbound Voice: Answering incoming calls for customer care, order booking, claims notification, and technical helpdesk queues.
  • Outbound Voice: Proactive outbound dialing for sales prospecting, customer survey collection, and accounts receivable collections.
  • Core Requirements: High accent neutrality, active listening capability, real-time problem solving, and low telephony latency.

2. Non-Voice BPO Operations

Non-Voice BPO encompasses text-based, digital, and asynchronous back-end workflows. It is widely utilized for document-heavy operations where accuracy, indexing, and compliance are paramount.

  • Digital Communication: Omnichannel live chat management, social media response triage, and email customer support.
  • Transactional Processing: Alphanumeric data extraction, purchase order validation, claims adjudication, and file indexing.
  • Core Requirements: Fast typing speed, high reading comprehension, meticulous attention to detail, and process repeatability.
Operational Attribute Voice BPO Non-Voice BPO
Primary Communication Medium Telephony, VoIP, interactive voice response (IVR) Live chat, email, web portals, core databases
Interaction Model Synchronous (Real-time verbal dialogue) Asynchronous or synchronous text and data entry
Typical Workflows Customer hotlines, outbound sales, phone collections Data transcription, email support, statement analysis
Primary Skill Prerequisites Spoken language fluency, empathy, de-escalation Analytical accuracy, typing speed, process adherence

4. Cognitive Complexity & Skill Classification: BPO vs. KPO vs. LPO vs. RPO vs. ITES

As business operations have become more specialized, outsourcing has evolved from basic task repetition into advanced analytical disciplines categorized by cognitive complexity and domain expertise.

1. Traditional BPO (Rule-Based, Process-Driven Execution)

Traditional BPO executes deterministic, procedural tasks governed by strict Standard Operating Procedures (SOPs). These processes require minimal subjective interpretation. Examples include digitizing handwritten application forms, logging invoices against purchase orders, and basic customer ticket routing.

2. Knowledge Process Outsourcing (KPO: Analytical & Judgment-Intensive)

Knowledge Process Outsourcing (KPO) involves high-level cognitive analysis, subjective interpretation, and advanced industry knowledge. KPO analysts typically hold university degrees in finance, accounting, data science, or engineering. In corporate operations, KPO teams conduct market intelligence research, financial modeling, portfolio risk grading, and underwriting credit memo assembly.

3. Legal Process Outsourcing (LPO)

A specialized branch of KPO where legally trained professionals manage routine and high-volume legal workflows. Common LPO responsibilities include contract abstraction, intellectual property and patent documentation, e-Discovery indexing, and statutory compliance auditing.

4. Recruitment Process Outsourcing (RPO)

An outsourced human resources model where an external partner manages all or part of an organization's talent acquisition lifecycle. RPO specialists manage job posting distribution, candidate sourcing, initial resume screening, interview scheduling, and onboarding coordination.

5. IT-Enabled Services (ITES & Technical Back-Office)

IT-Enabled Services (ITES) refers to operational workflows that leverage information technology infrastructure for delivery. ITES bridges traditional business outsourcing with IT administration. Core ITES functions include Tier 1–3 network monitoring, database administration, software quality assurance (QA) test execution, and remote cloud infrastructure maintenance.

Outsourcing Tier Cognitive Complexity Prerequisite Domain Background Representative Workflow Examples
Standard BPO Low (Strict Rule-Based SOPs) General administrative training & process literacy Form entry, basic ticket triage, receipt logging
Technical ITES Moderate (Diagnostic & Infrastructure) Information technology, systems administration Server monitoring, QA test scripts, Tier 2 technical helpdesk
Recruitment RPO Moderate (Evaluation & Talent Sourcing) Human resources, corporate recruiting Candidate screening, interview coordination, background verification
Financial KPO High (Forensic Risk & Analytical Modeling) Finance, Accounting, Economics, or Underwriting Forensic statement scrubbing, credit risk assessment, cash flow models
Legal LPO High (Regulatory & Statutory Analysis) Paralegal, Legal, or Compliance certification Contract redlining, UCC-1 lien filings, statutory disclosure auditing

5. Common Vertical BPO Domains: Healthcare, HR, and Administrative Operations

Beyond broad functional divisions, enterprises frequently outsource to specialized vertical service providers equipped with pre-built compliance workflows and domain certifications.

1. Healthcare & Medical BPO

Healthcare providers, medical billing agencies, and hospital networks rely on medical BPO to manage the complex administrative cycle surrounding patient care:

  • Medical Billing & Coding: Translating medical records and doctor notes into standardized alphanumeric codes (ICD-10, CPT, HCPCS) for insurance reimbursement.
  • Revenue Cycle Management (RCM): Managing patient registration, insurance pre-authorization, claim submission, denial management, and accounts receivable follow-up.
  • Regulatory Compliance: Operating within strict HIPAA data privacy and encryption guidelines to protect patient electronic health records (EHR).

2. Human Resources Outsourcing (HRO)

Organizations leverage HRO providers to streamline workforce administration while maintaining compliance with state and federal employment regulations:

  • Payroll Processing: Calculating gross-to-net pay, tax withholdings, direct deposits, and annual tax document generation.
  • Benefits Administration: Managing open enrollment for health, dental, vision, and retirement accounts.

6. Geographic Delivery Models: Offshore vs. Nearshore vs. Onshore BPO

The geographic location of your delivery center dictates operational cost efficiency, time-zone synchrony, and cultural alignment. Enterprise operators match specific workflows to the optimal geographic model.

1. Offshore BPO (Global Talent & 24/7 Follow-the-Sun Coverage)

Offshore service centers are established in distant, talent-dense nations—most notably India and the Philippines. This model offers clear operational advantages:

  • Scalable Talent Access: Rapid access to university-educated analysts and operational specialists trained in global business standards.
  • Follow-the-Sun Continuity (24/7/365): Enables North American companies to queue transactions at the close of domestic business and receive fully scrubbed, verified files prior to morning market opening.
  • Operational Efficiency: Allows companies to convert fixed domestic payroll into flexible, scalable operational capacity.

2. Nearshore BPO (Regional Synchrony & Proximity)

Nearshore delivery centers are located in neighboring countries sharing identical or adjacent time zones (for example, US businesses partnering with centers in Mexico, Costa Rica, or Colombia). This model is well suited for workflows requiring real-time verbal collaboration, daily synchronous management, or regular executive site visits.

3. Onshore (Domestic) BPO (Local Presence & Regulatory Clearance)

Onshore delivery utilizes service centers located within the same country (for example, secondary domestic metropolitan markets). While domestic operations carry higher operating expenses than offshore models, they are frequently selected for defense programs, municipal government contracts, or workflows requiring domestic security clearances.

Location Model Typical Geographic Hubs Core Strategic Advantage Optimal Workflow Fit
Offshore BPO India, Philippines Scalable talent pools & 24/7 overnight queue processing Financial statement scrubbing, data indexing, overnight underwriting
Nearshore BPO Mexico, Costa Rica, Colombia Real-time time-zone alignment & bilingual language skills Synchronous customer phone support, live sales outreach
Onshore BPO Domestic secondary markets Local legal presence & direct regulatory compliance Government contracts, defense workflows, domestic security clearance

7. Operating & Staffing Architecture: Shared Pools vs. Dedicated Pods

A critical operational decision when evaluating BPO services is selecting between a Shared Service Pool and a Dedicated Pod Model.

The Structural Limitations of Multi-Tenant Shared BPO Pools

In a traditional shared BPO model, agents are pooled across multiple unrelated client accounts. An agent may handle an eCommerce customer inquiry in the morning, process an insurance claim at midday, and attempt to scrub a commercial bank statement in the afternoon. This multi-tenant model frequently introduces context switching, knowledge leakage, inconsistent quality, and reduced accountability.

The Dedicated Staffing Pod Architecture

To eliminate the drawbacks of shared labor pools, organizations handling complex, high-velocity workflows utilize dedicated staffing pods. In this architecture, full-time specialists are exclusively assigned to a single client organization. Advantages include:

  • Deep Institutional Memory: Analysts master your proprietary guidelines, quality tolerances, and workflow checklists, operating as a seamless extension of your internal desk.
  • Turnaround Time Consistency: Dedicated queues eliminate idle file wait times in shared queues.
  • Data Isolation: Dedicated teams operate within isolated physical and digital environments, preventing cross-client data exposure.

BPO Commercial & Engagement Models

BPO partnerships are commercially structured in three primary ways:

  • Dedicated Full-Time Equivalent (FTE): A fixed monthly structure where dedicated specialists work exclusively for your organization under your direct operational oversight.
  • Shared Staffing Pool (Time & Materials): A flexible arrangement where resources are billed based on hours logged across shared queues.
  • Per-Transaction / Unit-Based: Fees are calculated per unit of output (such as per document indexed, per statement scrubbed, or per claim adjudicated).

8. Deep-Dive: High-Value Financial KPO & Forensic Underwriting Pods

In alternative lending, revenue-based financing (RBF), and merchant cash advances (MCA), back-office financial BPO functions as a critical credit and risk mitigation gatekeeper. Overlooking an undisclosed daily remittance, altered font vector on a PDF, or active 4th-position UCC lien can result in significant capital loss.

3-Tier Forensic Underwriting Pod Workflow Architecture
1

Tier 1: Document Intake & Triage (0–15 Mins)

Instant submission logging, completeness validation, OCR data extraction, and missing page notification to the submitting broker.

2

Tier 2: Forensic Statement Scrubbing (15–35 Mins)

Pixel-level PDF font anomaly verification, Net Daily Cash Flow (NDCF) calculation, and daily remittance stress-testing.

3

Tier 3: Lien Searches & Credit Memo (35–55 Mins)

Secretary of State (SOS) UCC-1 lien searches, tax transcript matching, and final credit memo assembly for credit committee sign-off.

First-Hand Methodology: How Dedicated Pods Eliminate Bottlenecks

Target Underwriting Solutions structures dedicated pods to execute multi-stage forensic validation before capital is deployed:

Stage 1: Automated Intake, Deal Triage & OCR Validation
Incoming deal submissions from broker portals and email queues are immediately logged. Analysts verify file completeness (application, 3–6 months of bank statements, driver's licenses, voided checks), initiate OCR data extraction, and flag missing pages within minutes of intake.

Stage 2: Forensic Bank Statement Scrubbing & Cash Flow Integrity
Specialized analysts conduct pixel-level inspections of digital PDF statements to identify font discrepancies, altered vector layers, and modified balances. The pod calculates true Net Daily Cash Flow (NDCF), excludes circular transfer loops, identifies undisclosed daily/weekly ACH remittances, and flags negative balance days via our bank statement scrubbing service.

Stage 3: Collateral Searches, Stacking Audits & Credit Memo Generation
Senior analysts execute Secretary of State (SOS) UCC-1 lien searches, verify business entity standing, cross-reference landlord and tax transcripts, and assemble a comprehensive credit summary memo ready for the Chief Credit Officer’s final decision.

9. Enterprise Security, SOC 2 Compliance & Data Governance

When outsourcing sensitive financial, corporate, or customer records, enterprise security cannot be treated as an afterthought. Leading BPO providers implement technical controls aligned with NIST SP 800-53 security frameworks, ISO/IEC 27001 standards, and regulatory guidance on third-party risk from the Federal Reserve (SR 13-19).

Institutional Data Security Protocols

  • Virtual Desktop Infrastructure (VDI): Analysts operate within secure, cloud-streamed virtual desktops hosted on client-approved servers. Local clipboards, USB ports, external printing, and screen recording are digitally restricted.
  • Zero Local Data Persistence: Sensitive records and statements are never stored on local offshore workstations; all files reside strictly within encrypted cloud repositories.
  • Strict Role-Based Access Control (RBAC): Analysts are granted least-privilege access restricted exclusively to the specific folders and CRM queues required for active file processing.
  • Multi-Factor Authentication (MFA) & IP Whitelisting: Access to client systems requires hardware-token MFA, and connections are restricted strictly to whitelisted static IP addresses.
  • Continuous Audit Logging: System activities, file openings, and data transfers are recorded with immutable audit logs meeting AICPA SOC 2 Type II compliance standards.

10. Operational Governance: KPIs & SLAs Across BPO Types

To ensure alignment and accountability, organizations establish distinct Service Level Agreements (SLAs) tailored to the nature of the outsourced function.

BPO Discipline Core Key Performance Indicators (KPIs) Standard SLA Governance Benchmark
Front-Office Customer Care First Contact Resolution (FCR), Average Handle Time (AHT), CSAT >85% FCR, <30 second average speed to answer, CSAT >90%
Back-Office Data Processing Turnaround Time (TAT), Error Rate, Files Processed per Shift <0.5% error rate, same-day batch processing completion
Financial Underwriting Pods Forensic Scrubbing TAT, Default Correlation, Stacking Detection Rate Target Underwriting SLA: Sub-60 min review, <0.5% error tolerance
Technical ITES Helpdesk Mean Time to Resolution (MTTR), First Response Time, SLA Uptime 99.9% uptime compliance, MTTR <2 hours for critical incidents

11. Step-by-Step Decision Framework: Selecting the Optimal BPO Model

To determine the ideal BPO configuration for your organization, follow this structured 4-step decision roadmap:

  1. Audit Process Complexity vs. Repeatability: Map all internal workflows. Classify repetitive, rule-based tasks for standard BPO or automation, while assigning analytical, judgment-heavy functions to dedicated KPO pods.
  2. Define Maximum Turnaround & Error Tolerance: Determine if your business model demands rapid SLAs (such as commercial loan underwriting offers) or if 24-hour batch processing is sufficient (such as monthly accounting reconciliations).
  3. Establish Geographic Alignment: Determine whether overnight processing (Offshore) or real-time synchronous daily communication (Nearshore/Onshore) creates greater strategic value for your operations.
  4. Select Delivery Architecture: If your workflows involve proprietary underwriting guidelines, sensitive financial records, or competitive broker relationships, mandate a Dedicated Pod model over shared call pools.

Frequently Asked Questions About Types of BPO

What are the primary types of BPO?
BPO is categorized across multiple classification dimensions: (1) By Function (Front-Office vs. Back-Office); (2) By Communication Channel (Voice vs. Non-Voice); (3) By Skill and Complexity (Traditional BPO, KPO, LPO, RPO, and ITES); (4) By Geography (Offshore, Nearshore, and Onshore); (5) By Industry Scope (Horizontal vs. Vertical BPO); and (6) By Delivery Architecture (Shared Multi-Tenant Pools vs. Dedicated Pods).
What is the difference between Front-Office and Back-Office BPO?
Front-Office BPO encompasses external, customer-facing activities such as customer support, telemarketing, and sales helpdesk. Back-Office BPO manages internal operational infrastructure—including financial accounting, loan underwriting, data entry, compliance auditing, and record processing—that does not involve direct customer contact.
What is Voice BPO vs. Non-Voice BPO?
Voice BPO involves real-time telephony interactions like inbound customer service hotlines, telemarketing, and collections. Non-Voice BPO involves digital, text-based, or back-end transactional workflows such as live chat, email management, data extraction, document indexing, and transaction reconciliation.
How does Knowledge Process Outsourcing (KPO) differ from standard BPO?
Standard BPO executes structured, rule-based processes like basic data entry or form processing. KPO involves advanced analytical, specialized, and judgment-intensive tasks requiring professional domain expertise, such as commercial credit underwriting, cash flow modeling, risk analysis, and legal contract abstraction.
What are IT-Enabled Services (ITES)?
IT-Enabled Services (ITES) represent business processes that rely heavily on information technology infrastructure for delivery. Common ITES functions include technical helpdesk (Tier 1-3), network monitoring, data center administration, software QA testing, and automated ERP record management.
Why do commercial lenders utilize dedicated BPO pods over shared call centers?
Shared BPO pools route complex files across rotating agents, leading to context switching, elevated error rates, and deal delays. Dedicated BPO pods assign full-time, client-exclusive financial analysts trained on proprietary underwriting boxes, delivering rapid turnaround times, deep institutional memory, and isolated data environments.

Scale Your Deal Velocity with Dedicated Underwriting Pods

Eliminate underwriting bottlenecks and shorten your time-to-offer. Partner with Target Underwriting Solutions for institutional-grade forensic statement scrubbing, UCC-1 lien searches, and dedicated financial analyst pods.

Schedule an Advisory Consultation →
BW

About the Author: Bryan Winkle

Bryan Winkle is the Operations Director at Target Underwriting Solutions, bringing over 15 years of experience in MCA underwriting, accounts outsourcing, and risk analysis. He leads the specialized underwriting desk providing bank statement scrubbing, stacking detection, and deal packaging for alternative funders across the USA and Canada. Author Profile →

Types of BPO Types of BPO Services Back Office BPO Voice vs Non-Voice BPO BPO vs KPO Dedicated Underwriting Pods Alternative Lending BPO SOC 2 Compliance