Security & trust
Controls you can check, not badges.
Lending software handles information that matters. Here is what we actually do, in plain language, and what we do not yet claim.
WHAT WE DO TODAY
Eight practices, stated plainly.
| Area | Practice |
|---|---|
| Access | Every user signs in with their own credentials and a defined role. Borrowers see only their own loans through the portal; lender staff see the workspace. |
| Financial changes | Changes to a loan's terms are recorded as dated revisions with who, when and why, and a change to your defaults never rewrites a boarded loan. Payments are corrected by posting reversals rather than editing history. |
| Money | AIRE never holds or moves borrower or investor funds. Payments are recorded against your own accounts; any future payment rail connects your merchant account, not ours. |
| Backups and recovery | Our migration procedure requires a backup and a tested restore on a copy before changes to money tables, and the live book is fingerprinted before and after. |
| Secrets and code | All configuration comes from environment variables; nothing sensitive is committed. The lending application's continuous integration runs type checks, the automated test suite and a secret scanner on every change; this website's CI runs type checks, tests and a dependency audit. |
| AI | AI reviews evidence and proposes; it never posts money or approves a draw on its own. The draw fraud detector fails closed: if it cannot complete a review, the draw is held for a person, not waved through. |
| Hosting and transport | The application and this website run on Vercel with TLS on every connection. A hosting provider’s certification covers the host, not our application, and we say so. |
| Your data | Loan records, issued documents and accounting exports belong to you. Export formats and the transfer process are written into your setup plan. |
What we do not
claim yet.
We are not SOC 2 certified and we will not borrow our host’s badge. Security review should address the actual service and the scope of the controls above.
If you have a security questionnaire, procurement requirements or a complex operating model, send it. We answer it against the practices above, in writing, before any commitment. Where a requirement is not met today, we say so rather than promise a date.
Send us your requirementsThis marketing website
The product tour uses sample information only. The walkthrough form asks for business contact details and a short description of your needs. Submissions are stored privately on Vercel, an operator is notified, and this website does not take loan applications or payment information.
Please keep borrower documents, bank details, Social Security numbers and other sensitive loan information out of the form.
THE WHOLE BUSINESS. ONE PLATFORM.
Spend your time lending.
Let the details connect.
Bring one real loan. We’ll walk it through AIRE with you.