Designed with enterprise security requirements in mind.
Audelya handles sensitive borrower and loan data. This page summarises our approach for procurement, risk and compliance teams. Detailed documentation is available on request.
Our approach.
GDPR
Personal data is processed in line with the GDPR, with EU-based processing as the default.
Data protection
Data is used only to deliver the service to the customer that provided it.
Encryption in transit
Connections are protected with TLS.
Encryption at rest
Stored documents and data are encrypted.
Role-based access
Lenders, borrowers and verifiers see only what their role requires.
Audit logs
Key actions are logged with user and timestamp.
Authentication
Individual user accounts; SSO options can be discussed for enterprise customers.
Data retention
Retention periods are agreed with the customer and documented.
Subprocessors
A current list of subprocessors is available on request.
AI model usage
AI assists with document processing. Customer data is not used to train general-purpose models.
Human oversight
AI outputs are suggestions. Decisions remain with qualified people.
Infrastructure
Hosted on established cloud infrastructure providers.
Incident management
Defined procedures for detecting, handling and notifying incidents.
Privacy
See our privacy notice for how we process personal data.
Business continuity
Backups and recovery procedures protect customer data.
Accurate by default
“We describe only controls we have in place. Audelya does not currently claim SOC 2 or ISO 27001 certification.”
Request security documentation.
Our team can share further detail for your vendor assessment and answer security questionnaires.