Security / IT
Security your institution demands.
Trust you can build on.
Your portfolio data is one of your most critical assets. We're not just a software provider; we're your fiduciary partner. We built LoanBoss with auditable, enterprise-grade security at its core, so you can focus on your portfolio with total confidence.
We'll help make your vendor risk assessment a breeze.
Your IT and compliance teams have a critical job to do. We help you make it the easiest part of their day.
THE PROOF
Our SOC 2 Type II Report
We conduct annual, independent SOC 2 Type II audits that validate our controls for security, availability, and confidentiality. Download the full, unredacted report for your compliance team.
ENTERPRISE SECURITY
Your Vendor Risk Assessment
The most comprehensive VRA you will find.
MCP Server Guide
The LoanBoss MCP Server acts as a bridge between your observability data in LoanBoss and any AI agents that support Model Context Protocol (MCP). Providing structured access to relevant LoanBoss context, features, and tools, the MCP Server lets you query and retrieve observability insights directly from your own AI agents. Download MCP Protocol One Pager
API Guide
Bring your LoanBoss loan, deal, and portfolio data into the tools your team already uses. Our API provides secure, read-only access to support custom reporting and integrations. Download the technical guide for available data, authentication details, and sample queries.
A comprehensive approach to security and compliance.
Your data is protected at all times. All data is encrypted in transit using TLS 1.2+ and at rest using industry-standard AES-256 encryption. Your documents and financial data are secured in a world-class, redundant cloud infrastructure, protecting you from data loss and hardware failure.
You control who sees what. LoanBoss provides granular, role-based permissions to ensure your team members, partners, and auditors only have access to the specific data they need. All access is logged, creating a fully auditable trail for your compliance team.
Your system is always on. We are built on a highly available, multi-region architecture with automated backups and a tested Disaster Recovery (DR) and Business Continuity Plan (BCP). We are prepared for the unexpected so you don't have to be.