Security & Privacy
Trust is part of the product.
Borrowers share sensitive financial information. The experience has to feel secure and actually be secure.
Secure portal
Private uploads, encrypted storage, and no public file links.
Access control
Role-based permissions and object-level authorization on every record.
Field-level encryption
SSN, TIN, DOB, and ID numbers are encrypted and masked in the UI.
Auditability
Logged consents, signatures, document actions, and AI review history.
Upload screening
Every file passes MIME and magic-byte validation before it enters the secure file room.
Compliance posture
Disclosures, e-sign consent, and fair-lending safeguards built in.
Our security program is designed around the FTC Safeguards Rule, OWASP secure-by-design principles, and financial data-protection norms under the Gramm-Leach-Bliley Act. See our privacy disclosures for how personal information is handled.