Trueline CovenantSecurity & data handling
Your borrowers' data is confidential. We treat it that way.
How we handle the documents you send, in plain terms. If you have a vendor due-diligence questionnaire, send it to [email protected] and we will answer it in full.
Agreements first
- A mutual NDA is signed before you send any documents, including for the free test.
- Client work runs under a written services agreement with a data-handling addendum.
Where data lives
- Client files are kept in access-restricted storage, separate for each client, and deleted on request under our retention policy.
- Documents and work papers move only over encrypted connections (HTTPS or TLS). We never ask you to send loan files as plain email attachments; we give you a secure upload route instead.
- Access is limited to the members of our team working on your account.
- Before we accept any client documents, every account that can reach them has multi-factor authentication turned on.
Document tools
- Our covenant calculations run in our own code, on a cloud workspace we control, and that code sends nothing to outside services.
- We use AI-assisted tools to read documents, and a credit reviewer checks every result. Before you send anything, we tell you which service providers would handle your documents and on what terms, and you can say no.
- We never use your documents to train AI models, and your data is never shared with other clients.
What we never do
- We never touch cash, payments or wires. We are not a loan servicer or agent.
- We do not store your portal credentials or log in to borrower or lender portals.
- We do not sell, share or publish client data.
Retention and deletion
- Free-test documents are deleted within 30 days of your results unless you become a client.
- Client documents are kept for the engagement plus a retention period you agree.
- When an engagement ends we return your work papers in Excel and PDF, then delete your data and confirm in writing.
Certifications and incidents
- Trueline Covenant is a young firm and does not hold SOC 2 or any other security certification. We have a written information-security policy and will answer your due-diligence questionnaire in full, including where a control is still being put in place.
- We have a written incident response plan and will notify you within 72 hours of confirming any incident that affects your data.
Reporting a concern: email [email protected] with "Security" in the subject line.
Free covenant test
One package. Five business days. No cost.
Send a package you already know the answer to. That is the fastest way to find out whether we are worth your time.
Get a free covenant test Prefer to talk first? Request a call
- Free on one borrower package
- Mutual NDA before any documents
- No obligation