Feature
An audit log and data security built in
Lending files hold the most sensitive data a small business has. Sensitive fields are encrypted and masked, access follows roles, and every change, reveal and export is on the record.
- Compliance pack: add-onsoon
Plans from
$69/ user / month
Billed monthly, or less billed annually. No seat minimum.
- Setup fee
- $0 (introductory offer)
- Data migration
- Free (introductory offer)
Introductory offer, for a limited time.
- We import your data from your current CRM or spreadsheets.
- Month to month. Export your data any time.
Encrypted sensitive fields
SSNs, EINs, dates of birth and bank account and routing numbers are encrypted at rest.
Masked by default
Sensitive values show masked; revealing one needs a permission and is logged with who and when.
Roles
Owner, manager, agent, processor and read-only, with agents limited to their own records by default.
A full audit log
Creates, updates and deletes with a diff, PII reveals, exports and submit-anyway decisions.
Consent on file
The application form stores the consent text and its version with each lead.
Private documents
Files are never public: they are streamed only through the app to users allowed to see them.
Sensitive data
Owner SSNs and dates of birth, business EINs and bank account and routing numbers are encrypted at rest. Lists and screens show them masked, with the last four digits where that helps. Revealing a full value requires the reveal permission, and every reveal is written to the audit log. Sensitive values are never written to logs or exports.
Access by role
| Role | Typical use |
|---|---|
| Owner | Everything, including users, settings and billing |
| Manager | The whole pipeline, team and reports |
| Agent | Their own leads and deals, unless visibility is shared |
| Processor | Documents, statements and submissions |
| Read-only | View without changing anything |
Exporting a list to CSV is its own permission, and every export is logged.
The audit log
Every create, update and delete on business records is logged with the user and the fields that changed (sensitive values redacted). So are PII reveals, exports, lender submissions sent against the matching result, and permission changes. When a merchant or lender disputes what happened, you can show it.
Consent and disclosures
Leads from your application form carry the consent text and version the merchant agreed to. Funder disclosures and contracts can be stored as documents on the deal. State commercial financing disclosure laws put most of the disclosure duty on the provider, with broker duties in several states; our guide to state disclosure laws summarizes them (not legal advice).
Coming soon
A compliance pack with state disclosure tracking per deal, a broker licence and registration registry, and consent audits.
Questions
Is my data encrypted?
Sensitive fields (SSN, EIN, date of birth, bank numbers) are encrypted at rest, and the site is served over HTTPS.
Can I see who looked at an SSN?
Yes. Every reveal is in the audit log with the user and time.
Can I export my data?
Yes. Every list exports to CSV for users with the export permission, and exports are logged.
Do you have SOC 2?
Not today. We describe the controls that exist on this page and nothing more.
Related
- FeatureDeal pipelineA deal pipeline built for lending: 22 statuses in five phases, board and table views, time in status, stips and conditions, underwriting notes and a locked pricing block.Read
- FeatureLead import and application formImport CSV or XLSX lead lists with column mapping and duplicate checks, and give merchants an application link that collects details, consent and bank statements.Read
- SolutionMCA fundersA CRM for merchant cash advance funders working ISO submissions: intake, statement figures, underwriting notes and conditions, offers, remittance tracking and renewals.Read
- SolutionMCA brokers and ISOsA merchant cash advance CRM for ISOs and brokers: lead import, bank statement figures, lender matching, submissions, offers, commissions and renewals in one place.Read
- GuideState commercial financing disclosure laws, as of October 2026Which states require commercial financing and MCA disclosures as of October 2026, what Texas HB 700 means for brokers, and what a broker's CRM should record.Read
- GlossaryPersonal guarantyA personal guaranty makes a business owner personally answerable for the merchant's obligations. In MCAs it is usually a performance guaranty, not a payment guaranty.Read
- GlossaryConfession of judgment (COJ)A confession of judgment is a signed document letting a creditor obtain a court judgment without a lawsuit if the signer defaults. Its use in MCA has been restricted.Read
See it on your own deals.
Tell us about your shop. We set up your workspace and import your data from your current CRM.