Security & broker compliance
Borrower data, handled like it matters.
Strong protection for borrower data, with broker compliance workflows built into every deal.
SOC 2 · In progress
SOC 2 readiness
SOC 2 preparation is underway. We can walk qualified prospects through our current controls and security roadmap.
PIPEDA
PIPEDA compliant
Full adherence to Canadian privacy law, including consent, access, and data-deletion workflows.
AES-256
Encryption everywhere
AES-256 at rest and TLS 1.3 in transit, across the platform.
CA · AWS
Canadian data residency
All borrower data is stored and processed in AWS Canada (ca-central-1).
AI · No training
No model training on your data
Your borrowers' documents are never used to train AI models.
Broker review
Brokerage review workflows
After the commitment letter is uploaded, every deal includes the signed forms, disclosures, consent records, timestamps, and supporting documents your brokerage needs to review and release commission.
Operational controls
How we run the platform.
Access & authentication
- →Multi-factor authentication on admin accounts
- →Role-based access at the workspace level
- →Audit log of every file view, download, and edit
Infrastructure
- →Hosted on AWS Canada (Central) with multi-AZ failover
- →Encrypted, automated backups
- →Continuous infrastructure monitoring
Data & privacy
- →Customer-controlled data deletion
- →Least-privilege access to production systems
- →No third-party tracking on signed-in pages
Sub-processors
- →Core data hosted with AWS Canada (ca-central-1)
- →Data processing agreements with our sub-processors
- →Current sub-processor list available on request
Policies & documentation
Read the fine print.
Privacy PolicyHow we collect, use, and protect personal information under PIPEDA.Read →Terms of UseThe agreement governing access to the Autowrite platform.Read →Data Processing AgreementHow borrower data is processed on a Broker’s behalf.Read →Acceptable Use PolicyThe standards that keep the platform secure for everyone.Read →Cookie PolicyWhat cookies we use and how to manage your choices.Read →
Questions about security?
Book a walkthrough of our current controls, Canadian data residency, and broker-side compliance workflows.