Security
Security is a feature, not a PDF.
How we're different
- We run the underwriting checklist end to end (doc chase to memo to exceptions).
- Policy-gated and human-approved at risk points. No silent automation.
- Evidence-first outputs with citations and an audit trail.
Trust rule: AI drafts, humans decide for sensitive outcomes.
Encryption
Encryption at rest and in transit with managed keys.
RBAC
Role-based access control and least privilege enforcement.
Audit logs
Immutable timeline of every action, reviewer, and approval.
Data retention
Configurable retention policies and export controls.
Vendor vaulting
Credentials stored and rotated in secure vaults.
PII handling
Field-level redaction and audit-safe logs.
Security program aligned with SOC 2 controls (hypothetical roadmap).
Download Security Packet (PDF)