Security
Ready for your IT review.
Credit files hold your customers' financial information. Here's how Credlab keeps it, and how to get the details your IT or procurement team will ask for.
Hosted in North America
A North American datacenter.
Encrypted and backed up
Encrypted in transit and at rest, with daily backups.
Audit logging built in
Who changed what, when and why, with IP and device captured, on staff records and credit applications.
Role-based permissions
Ordering reports, viewing reports, private notes and outcome sending are each a separate role.
Bank verification via Plaid
Read-only, consent-based connections. The applicant's bank credentials never touch Credlab.
Fraud screening
Every application is screened with AI for signs of fraud, and our analysts review anything it flags.
What's in the file, and who sees it
A credit file can hold an application, signed documents, trade references, bank verification data and the public record on a company. Inside Credlab, access to each of those follows the roles you set for your own team, and Credlab's own analysts and support staff can open files to do their work. Every change anyone makes is written to the audit log.
The AI parts
Our analysts use AI to assemble files, draft analysis and screen applications. Your files are not used to train AI models: our AI provider's commercial terms prohibit it from training on customer data. Every AI-generated draft goes through the analyst before it is delivered, except the bank analysis, which is generated with AI from the Plaid data and labelled as such. See Analysts + AI.
For your security review
We'll send the security white paper and complete your vendor questionnaire. Your data can also be pulled from Credlab through our API or a flat-file export. Our privacy policy covers data handling in detail.
Request the security white paper. Email us and we'll send it the same day.
Questions we get asked
Where is our data hosted?
In a North American datacenter, encrypted in transit and at rest.
Who at Credlab can see our files?
Credlab's own analysts and support staff can open files to do their work, and every change anyone makes is logged. Your own team's access is controlled by the roles you assign.
Does Credlab store banking credentials?
No. Bank verification runs through Plaid on read-only, consent-based connections. The applicant signs in on Plaid's screens; no credentials pass through or are stored by Credlab.
Do you have a security questionnaire or white paper?
Yes. Request the security white paper below and we'll send it, and we're happy to complete your vendor questionnaire.
Your first analyst-reviewed credit report, back in about 48 hours.
Start a 30-day free trial, or bring two or three real applications to a demo and we'll walk them through Credlab end to end.