Security & controls
Bank-grade controls for other people's money.
Private lenders handle investors' capital and borrowers' personal information. Amortivo is built so the right people do the right things — and every action leaves a record.
Your data, isolated
- Every firm's data is separated at the application and database level
- Data and documents in secure, access-controlled storage
- Encrypted in transit (TLS) and sensitive identifiers encrypted at rest
Who can do what
- Roles and permissions per user, with custom roles
- Approval limits per role for underwriting
- Sensitive fields such as SINs and bank accounts masked unless permitted
Money controls
- A second person approves every distribution run
- Transfers out of trust need a different approver
- Investor banking changes require two people
- Bill payments above your threshold need approval
Sign-in
- Two-step verification by code
- Single active session per user
- Rate limiting and lockout on repeated failed attempts
- Separate, step-up verified sign-in for portal users
Accountability
- Every change logged with who, when and what changed
- Append-only loan ledger and journals — corrections are reversals
- Reconciliations and sign-offs kept as records
Resilience
- Automated database backups with long-term retention
- Document storage with versioning
- Health monitoring of the application and its jobs
Questions about security?
We'll walk your compliance officer or IT advisor through how Amortivo is hosted and controlled.