Security and governance.
Your data, policies and findings stay under your control, hosted for lenders and brokers or in your environment for institutions. Specific contractual and technical requirements are confirmed for each engagement.
What we commit to
- DeliveryA hosted service for lenders and brokers, or in your environment for institutions, on any cloud or on premises.
- Your dataIn an institution's environment no customer data leaves it; the hosted service processes your files for your decision only. Data is never pooled or used to train models.
- AI providerYour approved AI provider is used, or generative AI is switched off.
- Agents are advisoryAgents are off by default. They cannot change live controls or act on customers.
- Signed releasesEvery release is signed.
- No network callsThe detection library makes no network calls.
- Tamper-evident recordsRecords of what was done are tamper-evident, so any decision can be traced.
- Retention and exitRetention and exit are agreed before use.
- CertificationISO 27001 certification in progress.
Who decides
- Decision ownershipYou keep ownership of policy, thresholds, overrides, investigations and final decisions. Accountable people approve every consequential change.
- Pilot dataA pilot uses only the fields and history needed for the agreed decision, from approved historical extracts, with no live changes.
- Synthetic startA synthetic extract can validate the workflow before real records are approved.
Let your security team ask directly. We can begin with the decision and controls before any client data is shared.
Book a conversation