Case study · Mass onboarding

BBVA Mexico onboarding: induction kit for 8,000 new hires in six months

A Mexican banking institution with operations across the country launched an accelerated hiring programme of 8,000 new employees between April and September 2025, covering branch staff, contact-centre agents, digital banking and corporate roles. Every new hire received an induction kit with branded apparel, a laptop backpack, ceramic mug, encrypted USB stick, printed manual and a personalised welcome card from the CEO. Corp-Merch.MX produced and delivered the kits to twelve 12 training centres across six monthly waves, with CNBV, LFPDPPP and CFDI 4.0 compliance with zero observations.

Request a mass-onboarding quote Corporate onboarding merch

The programme at a glance

Client: Mexican banking institution (composite case; not a specific client)
Industry: Banking, financial services, fintech
Reach: 8,000 new hires in six months
Categories: Polos, shirts, sweaters, laptop backpacks, mugs, encrypted USB sticks, manuals, welcome cards
Volume: 72,000 pieces delivered in six monthly waves
Invoicing: 6 global CFDIs (one per month), consolidated Carta Porte, CNBV compliance

The programme was designed so every new hire felt part of the bank from day one. Corp-Merch.MX coordinated with Human Resources, the Compliance area, the Information Security area and the bank's internal logistics to ensure each kit arrived before the new hire's first working day.

What needed to change

Challenge one was concentrated volume. Producing 72,000 pieces in six months with a monthly peak of up to 14,000 pieces required expanded workshop capacity. Corp-Merch.MX ran its main CDMX workshop at full capacity and contracted additional production with two certified allied workshops to keep quality consistent. The piece allocation by workshop was done by category: polos and shirts in CDMX, backpacks and sweaters at the first allied workshop, mugs and USB sticks at the second allied workshop.

Challenge two was information security. The bank strictly prohibits merch that includes USB sticks or hard drives that are not certified by the Information Security area. Corp-Merch.MX worked with the bank's certified encrypted-USB catalogue (two approved brands) and laser-engraved the bank logo on the metal chassis without the device's encryption. The printed manual was delivered in a sealed envelope with a tamper-evident seal that the employee broke when opening it.

Challenge three was personal-data protection. The induction kit includes the CEO's welcome card personalised with the new hire's name. Corp-Merch.MX treated the 8,000-name roster as personal data under LFPDPPP: delivery of the roster via encrypted channel, file destruction at programme close, signed destruction certificate delivered to the bank's compliance area.

Challenge four was traceability per training centre. The bank operates 12 training centres across the country: CDMX, Guadalajara, Monterrey, Puebla, León, Querétaro, Tijuana, Ciudad Juárez, Mérida, Veracruz, Culiacán and Acapulco. Corp-Merch.MX delivered each kit to the training centre with its corresponding delivery certificate signed by the centre's responsible. The Carta Porte was stamped per regional shipment and linked to the month's global CFDI.

Challenge five was CNBV compliance. The bank is subject to CNBV provisions on gifts to clients and officials and, by extension, applies similar criteria to staff induction merch. Corp-Merch.MX designed the pieces with controlled unit value so as not to trigger regulatory observations. The programme's global invoice was accompanied by a Corp-Merch.MX letter confirming that no piece in the kit exceeded the allowed unit-value threshold.

How we approached it

The programme was organised by training centre and by onboarding month. Corp-Merch.MX received the new-hire roster from the bank 21 days before the start date. With that information Corp-Merch.MX produced the monthly batch of 12,000 pieces on average and delivered to the corresponding training centre 7 days before the new hire's first working day.

Production by category

Polos and shirts were produced in combed cotton with embroidery of the bank isotype and the internal slogan. Sweaters were produced in cotton-polyester blend with the isotype embroidered on the left chest. Backpacks were produced in 600D polyester with a padded 15-inch laptop compartment, internal document pocket and reinforced closures. Mugs were produced in ceramic with the bank isotype in high-density silkscreen. Encrypted USB sticks were sourced from the bank-certified catalogue and laser-engraved on the metal chassis. Manuals were offset-printed in two colours, hot-melt bound, and delivered in a sealed envelope with a tamper-evident seal.

Logistics by centre

Corp-Merch.MX delivered each monthly batch to the 12 training centres with consolidated regional shipments. For the metropolitan centres (CDMX, Guadalajara, Monterrey, Puebla) the delivery deadline was 3 business days from workshop departure. For the northern and southern centres (Tijuana, Ciudad Juárez, Culiacán, Mérida, Veracruz, Acapulco) the deadline was 5 business days. Querétaro and León were delivered in 4 business days due to their central location. The Carta Porte was stamped per regional shipment when the weight or value exceeded the SAT thresholds.

Personalisation and data protection

The CEO's welcome card was printed on coated paper with the new hire's name in institutional typography. The name roster was delivered to Corp-Merch.MX via encrypted channel (SFTP with temporary key) and destroyed at programme close. Corp-Merch.MX delivered to the bank compliance area the personal-data destruction certificate signed by the Corp-Merch.MX data officer.

What changed for the client

The programme completed within the six-month window with six on-time monthly deliveries. The bank confirmed that 97% of new hires received their complete kit at least 24 hours before their first working day. The remaining 3% corresponded to hires with start dates changed by the bank during the month, which Corp-Merch.MX resolved with a 48-hour expedited delivery at no additional cost.

The bank Information Security area audited the encrypted USB sticks at the start and end of the programme, finding no observations. The device encryption remained intact after the laser engraving of the bank logo, and per-device traceability remained in the roster Corp-Merch.MX delivered.

The bank Compliance area reviewed the monthly global invoices and found no regulatory observations. The 6 global CFDIs passed SAT validations without rejection, the Cartas Porte were correctly linked, and the unit value of each kit piece stayed below the applicable CNBV threshold.

The bank Human Resources area reported that the new-hire satisfaction with the induction kit was 4.7/5 in the post-onboarding survey, and attributed part of that score to the detail of the tamper-sealed printed manual and the CEO's personalised card. The bank extended the contract with Corp-Merch.MX for the 2026 onboarding programme with two additional categories (windbreakers and tenure recognition plaques).

What the client measured

Kits delivered before first working day: 97% with 24 hours of anticipation.
CFDIs rejected by SAT: 0 during the fiscal year.
Cartas Porte stamped: 18 (3 per month on average, one per region).
CNBV regulatory observations: 0 on audit.
Personal-data destruction certificate: delivered and signed by Corp-Merch.MX to the compliance area.
New-hire satisfaction with the kit: 4.7/5 in post-onboarding survey.

What we learned

Lesson one was that a mass onboarding is a complex fiscal programme, not just a production programme. Corp-Merch.MX had to coordinate with the bank compliance area from the first meeting to ensure the kit met CNBV provisions. Without that prior coordination, the programme would have had regulatory observations.

Lesson two was that personal-data protection is not a cost — it is a competitive advantage. When Corp-Merch.MX delivered the destruction certificate for the 8,000-name roster, the bank compliance area included that certificate in its quarterly report to the audit committee. That practice differentiated Corp-Merch.MX from other vendors that simply delete files without leaving formal evidence.

Lesson three was about the security of encrypted USB devices. Laser engraving on the metal chassis did not affect the device encryption, but Corp-Merch.MX had to do three prior tests with the bank Information Security area before approving the method. The lesson is that prior testing of the engraving method is indispensable when working with certified devices.

Lesson four was about production with allied workshops. Corp-Merch.MX allocated pieces by category to certified allied workshops and maintained centralised quality control in CDMX. Quality was consistent across the three workshops and the bank reported no significant defects in any of the six months of the programme.

Frequently asked questions

How do you coordinate a mass onboarding with CNBV compliance?

Corp-Merch.MX works with the bank compliance area from the initial brief to ensure the kit meets regulatory provisions on unit value, device restrictions and fiscal traceability. The global invoice is accompanied by a signed compliance letter from Corp-Merch.MX.

How do you handle the personal data of the new-hire roster?

The roster is delivered to Corp-Merch.MX via encrypted channel (SFTP with temporary key), used exclusively to personalise the kit pieces, and destroyed at programme close. Corp-Merch.MX delivers to the client compliance area the signed destruction certificate.

Can Corp-Merch.MX engrave encrypted USB sticks without affecting the encryption?

Yes, by laser on the metal chassis. Corp-Merch.MX runs prior tests with the client Information Security area to confirm the device encryption stays intact after the engraving.

Is Corp-Merch.MX an authorised supplier for this bank?

No. Corp-Merch.MX is an independent external supplier. This case is a representative composite drawn from aggregated experience with corporate clients in the Mexican financial sector; the data, amounts and processes are illustrative.

Corp-Merch is an independent external supplier. This case is a representative composite drawn from aggregated experience with corporate clients in the Mexican financial sector; it does not describe a specific institution and does not constitute a verifiable commercial reference. Any coincidence with real banks, amounts or processes is unintentional.