Security

Your borrowers' financials, handled like they matter.

Deal data is scoped to your team at the database layer, encrypted in transit and at rest, and never used to train a model.

Encryption

TLS 1.3 in transit, AES-256 at rest

Documents live in scoped object storage and are served through signed, expiring URLs. Nothing is served from a public bucket.

Isolation

Row-level security at the database

Team scoping is enforced by database policy, so an application bug cannot leak another firm's deal.

Model handling

No training on your data

Extraction returns structured fields for your record. Nothing is retained for model improvement.

Authentication

SSO and SAML on Enterprise

Bring your identity provider and provision seats centrally with your existing directory.

Auditability

Every change is attributable

Deal edits, package generations and outreach sends are recorded with actor and timestamp.

Deletion

You can take it all back

Deleting a deal removes its extractions and generated packages.

Access control

Four roles, enforced in the database

Owner

Billing, team, branding and every deal on the desk.

Partner

All deals on the team, can assign work and send outreach.

Analyst

Assigned deals only. Can extract, package and model.

Viewer

Read-only on assigned deals. No sends, no exports.

Need a security review or DPA?

Enterprise plans include SSO/SAML, audit logging and a signed data processing agreement.

Contact sales