Security you can check, not just take our word for.
You're putting your buyers' Social Security numbers and bank details into our software. That deserves specifics rather than a badge, so here's what's actually in place, what it means day to day, and what we don't do.
What's in place
Two-factor and passkeys
Turn on two-factor with any authenticator app and print the recovery codes, or skip the code entirely and use a passkey with Face ID, Touch ID, or a hardware key. You get an email the moment anyone signs in or changes a security setting on your organization.
Social Security numbers get their own lock
SSNs and tax IDs are encrypted with a separate key and never stored next to the rest of the client record. Only the last four live in the file you work with every day. Revealing a full number takes a specific permission, and every time someone looks, it's recorded.
Your team only sees what you give them
Three roles ship with every account and you can build your own. Permissions are enforced on the server, not hidden in the interface, and they go down to individual features. A bookkeeper can work a buyer's file all day without ever seeing their SSN.
We don't hold card numbers
Card and bank details are tokenized by PayArc, our payment processor. Lendiom stores the brand, the last four, and the expiration date. The actual number never lands in our database, which keeps it out of reach if anything here ever went wrong.
Files are gated the same way everything else is
Documents you upload aren't sitting at a public address. Every request runs through the same permission checks as the rest of the account, so a link alone isn't enough to open a file.
Encrypted in transit
Everything between your browser, your buyer's phone, and our servers travels over an encrypted connection. Same for the payment portal your buyers use.
Your data stays yours
The PayArc merchant account is in your organization's name, not ours. If you cancel, you can keep processing with PayArc directly. Your records stay readable, and you can export your inventory, clients, and loans to CSV or JSON any time from Settings. Payment history and transaction detail come out as Excel reports.
We'd rather you stay because the software is worth paying for than because leaving is painful.
Ask us anything this page doesn't cover
If your diligence process has questions this page doesn't answer, whether that's about how we handle a specific kind of data, what your auditors need, or documentation you have to produce for someone else, just ask.
Email support@lendiom.com and you'll get a straight answer from someone who works on the product, not a form response.