Enterprise security at every layer.
Your borrower data, portfolio strategy, and trade secrets, protected by the same standards trusted by the world's largest financial institutions.
Defense in depth. Every layer protected.
SOC 2-Certified Data Infrastructure
Customer data and authentication run on Supabase (SOC 2 Type II certified, AWS-hosted). Your data lives on infrastructure trusted by Fortune 500 companies.
Field-Level Encryption
Sensitive identifiers encrypted with AES-256-GCM at rest. SSNs, emails and phone numbers are encrypted individually, not just at the disk level.
Row-Level Security
Every database table enforces tenant isolation at the query level. No application bug can leak data across organizations. Zero-trust architecture by default.
Multi-Factor Authentication
TOTP-based multi-factor authentication, Google and Microsoft sign-in, and role-based access control with deal-level permissions.
Immutable Audit Trail
Append-only audit logging captures every user action, API call, and data change. 7-year retention. Tamper-proof by design. Regulator-ready.
PII Redaction & Retention
Sensitive data never appears in application logs. Configurable per-tenant document retention purges source PDFs while preserving extracted data, with legal hold enforcement.