Security & data handling

Lending OS holds confidential borrower financials, guarantor information and lender correspondence. This page sets out where that data lives, who can see it, and how it's protected. It's written for the procurement and IT teams at the firms we work with.

Data residency

Your data is stored in Canada: the application database runs in AWS ca-central-1 (Montréal), the application servers run in Montréal, and uploaded files are stored in Montréal. The database is backed up daily, with seven days of backups kept.

A few services we rely on process data outside Canada: AI reading of uploaded documents and AI-drafted text (Anthropic, United States) and email delivery (Resend, United States). The full list is in our Privacy Policy.

Who can see what

• Each firm's deals, lenders and contacts are separated from every other firm's.
• Inside a firm, advisors see the deals they own or were added to; firm owners and admins see all of the firm's deals.
• Lenders only see what an advisor shares with them, through a link that requires a one-time code sent to their email. Links can be revoked at any time, and data-room invites to personal or test email addresses need a firm owner or admin to approve them.
• Borrowers see only their own document requests in the client portal, also behind a one-time code.

How it's protected

• All traffic is encrypted in transit (TLS). Our database and file-storage providers encrypt stored data at rest.
• Users can turn on two-step sign-in (authenticator app), and sign in with Google or Microsoft.
• Every change to a deal — and every share, invite, deletion and restore — is recorded in the deal's history with who did it and when.
• Deleted deals can be restored for 30 days, then they and their files are permanently removed.

Privacy

Public-record checks can only be run on the parties to a deal, for a recorded purpose, with the subject's consent covered. Results are erased after 12 months; the record that a check was run is kept. Individuals can ask what we hold about them through our privacy contact, and requests are answered within 30 days.

AI features

Document extraction, credit-memo and risk drafts use Anthropic's Claude models. Drafts are always marked as drafts and must be reviewed by an advisor before they reach a lender. Your data is not used to train models.

On our roadmap

SOC 2 Type II, single sign-on (SAML / OIDC) with automated user provisioning (SCIM), firm-enforced two-step sign-in, and French-language support. Ask us for dates if any of these are a requirement for you.

Questions or a security issue?

Email support@lenderos.ca. Security reports are handled as a priority.