Trueline CovenantSecurity & data handling
Your borrowers' data is confidential. We treat it that way.
How we handle the documents you send, in plain terms. If you have a vendor due-diligence questionnaire, send it to [email protected] and we will answer it in full.
Agreements first
- A mutual NDA is signed before you send any documents, including for the free test.
- Client work runs under a written services agreement with a data-handling addendum.
Where data lives
- Before we accept any documents, we confirm in writing where they will be stored: access-restricted storage, separate for each client, deleted on request under our retention policy.
- Documents and work papers move only over encrypted connections (HTTPS or TLS). We never ask you to send loan files as plain email attachments; we set up a secure upload route for you instead.
- Access is limited to the members of our team working on your account.
- Before we accept any client documents, every account that can reach them has multi-factor authentication turned on.
Document tools
- Our covenant calculations run in our own code, and that code sends nothing to outside services.
- We use AI-assisted tools to read documents, and a credit reviewer checks every result. Before you send anything, we tell you which service providers would handle your documents and on what terms, and you can say no.
- We never use your documents to train AI models, and we only use providers whose written terms say the same. Your data is never shared with other clients.
What we never do
- We never touch cash, payments or wires. We are not a loan servicer or agent.
- We do not store your portal credentials or log in to borrower or lender portals.
- We do not sell, share or publish client data.
Retention and deletion
- Free-test documents are deleted within 30 days of your results unless you become a client.
- Client documents are kept for the engagement plus a retention period you agree.
- When an engagement ends we return your work papers in Excel and PDF, then delete your data and confirm in writing.
Certifications and incidents
- Trueline Covenant is a young firm and does not hold SOC 2 or any other security certification. We have a written information-security policy and will answer your due-diligence questionnaire in full, including which controls are in place today and which are still being put in place.
- We have a written incident response plan and will notify you within 72 hours of confirming any incident that affects your data.
Reporting a concern: email [email protected] with "Security" in the subject line.
Free covenant test
One package. Five business days. No cost.
Send a package you already know the answer to. That is the fastest way to find out whether we are worth your time.
Get a free covenant test Prefer to talk first? Request a call
- Free on one borrower package
- Mutual NDA before any documents
- No obligation