Md. Code Ann., Fin. Inst. § 5-407

A banking institution may not permit any bank services to be performed for it, whether by contract or otherwise, unless the banking institution and the person performing the bank services give the Commissioner satisfactory assurances that the performance of the bank services will be subject to regulation and examination by the Commissioner to the same extent as if the banking institution itself were performing the bank services.