Where your data lives
PROVIDR runs on Amazon Web Services (AWS) in US regions only. The files you send us, the analysis we run on them, and our AI layer all operate inside our own AWS account.
Encryption
Data is encrypted in transit when you send it to us and when we return results, and encrypted at rest while it is stored.
AI and your data
Our engines do the analysis. AI is used on top of them, for example to reconcile results and draft credit memos, and it runs inside our AWS account through Amazon Bedrock.
- Model providers never see your files.
- Your files are never used to train public AI models.
Access controls
- Single sign-on with your identity provider.
- Multi-factor authentication on every account.
- Role-based permissions, so each person sees only the files their role needs.
Monitoring and resilience
- Audit logging. Every sign-in, permission change and admin action is logged.
- Threat detection. We monitor our systems around the clock for suspicious activity.
- Vulnerability scanning. Our code and its dependencies are scanned automatically for vulnerabilities before release.
- Backups. Data is backed up and encrypted, and we test our restores regularly.
- Written policies. Our security program follows written policies, reviewed every year.
Every number traced
Each figure in a PROVIDR file links to the page and line it came from, so your team, your auditors, and your examiners can check the work.
Independent assurance
The independent reviews on our roadmap:
| Review | Scope | Status |
|---|---|---|
| SOC 2 Type II | Independent audit of how our controls operate over time, across every system that touches customer data | Planned |
| Penetration test | Independent third-party test of our application and infrastructure | Planned |
Your security review
Send us your vendor questionnaire. We answer every question, walk your security team through our architecture, and share our subprocessors. Our security package, including policies, architecture, subprocessors, and completed questionnaires, is available on request at inquire@providrcredit.com.
Data we process for lenders
When a lender uses PROVIDR, we process applicant and borrower information on that lender's behalf, under our agreement with them. See section 14 of our Privacy Policy.
Reporting a security issue
If you believe you have found a security vulnerability in PROVIDR, please email inquire@providrcredit.com with the subject line "Security issue." Please do not access or change data that is not yours while investigating. We will acknowledge your report and keep you informed.