FAQs

Security Measure Description

  Strong Encryption (In Transit & At Rest)All data transferred between your browser and our servers is secured using SSL/TLS encryption (indicated by the https:// in our URL) to prevent interception. When your highly sensitive information is stored on our systems, it is protected using industry-standard encryption (e.g., AES-256).

  Access Controls and Authentication Access to your data is strictly limited to essential personnel on a “need-to-know” basis for loan processing. We enforce Multi-Factor Authentication (MFA) for all internal access and encourage its use for customer portal access to add a critical layer of security against unauthorized logins.

  Regulatory Compliance We are fully compliant with key financial regulations, including the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule. This mandates that we maintain a comprehensive, regularly audited information security program to protect your non-public personal information.

  Secure Infrastructure and Auditing Our systems are protected by enterprise-grade firewalls and active Intrusion        Detection/Prevention Systems (IDPS). We commit to regular security audits and penetration testing by independent third parties to proactively identify and address potential vulnerabilities.

  Clear Data Usage and Sharing Policy Your data is only used for the purpose of processing, underwriting, and securing a commercial loan. We only share necessary information with our network of approved lenders and certified third-party verification services, who are contractually bound to maintain the same high level of data security.

   Data Retention and Disposal We follow a defined data retention policy to store information only for as long as legally or operationally necessary. Once that period concludes, we use secure methods for the permanent disposal of your data.