Tenant isolation
Every borrower, loan, and document is scoped to your organization. Records from one tenant are never readable from another.
Trust and reliability
SpreadSpace handles lender and borrower financials. Here is how that data is protected, and how reliably the service runs.
Encryption in transit and at rest
TLS on every connection. Databases, document stores, and logs are encrypted at rest under dedicated KMS keys in production.
Access control
Five-role access control, org-wide MFA enforcement, and PII access locks. Included on every plan.
Explore the Compliance BundleAudit trail
PII access, organization activity, and API events are each logged, with up to 7-year retention.
See the log surfacesReview our Sub-Processors and Privacy Policy, or talk to us for security documentation.