Encryption in Transit
Roboloan requires HTTPS for all traffic and applies HTTP Strict Transport Security so browsers connect securely by default.
Security & Trust
Built to Protect Lender and Borrower Data.
A summary of the controls Roboloan has in place today. We'll expand this page as new controls, certifications, and audits are completed.
Platform Controls
How Roboloan Protects Your Data.
These are the controls Roboloan has in place today. We do not claim certifications, third-party audits, or compliance attestations we have not obtained.
Access Control
Access to lender and platform administration areas is governed by role- and permission-based authorization, so users see only the organizations, workspaces, and records their role allows.
Account Security
Accounts are protected with hashed credential storage, configurable password requirements, account lockout after repeated failed attempts, and optional two-factor authentication.
Audit History
Important servicing actions and changes are recorded in an audit trail so your team can review what changed, when, and who took the action.
Data Isolation
Organization data is scoped so one lender's loans, borrowers, and servicing records are not visible to another organization on the platform.
Infrastructure
Roboloan runs on managed cloud infrastructure with a SQL Server database, which provides platform-level backup and recovery capabilities for the environments we operate.
Payment-Partner Responsibilities
Borrower online payments are processed by our payment-processing partner, which is responsible for payment authorization, processor-level security, and settlement. Roboloan does not store full payment card or bank account credentials.
Incident Response
Our team monitors production systems and has an internal process for investigating, containing, and communicating about security incidents affecting the platform.
Responsible Data Handling
Access to production data is limited to team members who need it to operate and support the platform. See our Privacy Policy for how we collect and use information.
Roboloan has not obtained SOC 2, PCI DSS, ISO 27001, or other third-party security certifications at this time. If your organization requires a specific certification or a security questionnaire, contact our team and we'll let you know what we can share.
Questions About Our Security Program?
Talk to our team about your organization's security and compliance requirements.