A product that reads bank statements and photo IDs has to earn trust with specifics, not adjectives. So here is the short version: Lendquo encrypts documents in transit and at rest, isolates each organization's data, serves files through short-lived links rather than public URLs, and soft-deletes documents so your team keeps an audit trail. The sections below go deeper, and where a policy detail still needs to be confirmed in writing we say so instead of guessing.
- Encrypted in transit with TLS, HTTPS enforced, and HSTS enabled
- Encrypted at rest with AES-256 on Amazon S3
- Data isolated at the organization level
- File access through short-lived presigned URLs
- Two-factor authentication and social sign-in
- No third-party trackers or scripts on this site
Encryption in transit and at rest
Every connection to Lendquo travels over HTTPS with TLS, and HTTP Strict Transport Security is enabled on www.lendquo.com, so a browser only reaches the site over a secure channel. In transit means exactly that: the connection between your browser and Lendquo is encrypted end to end.
At rest, documents are stored on Amazon S3 with AES-256 server-side encryption. Each file is encrypted before it is written to storage and decrypted only when the application serves it back to your organization.
Data isolation
Lendquo isolates customer data at the organization level. The documents, extracted data, and deal information your team uploads belong to your organization, are kept separate from every other organization on the platform, and are not visible outside it. Access inside the product is scoped to your organization's members.
Access controls
Accounts can be protected with two-factor authentication using time-based one-time passwords (TOTP), so a password alone is not enough to sign in. Social sign-in options are also available for teams that prefer them.
Stored documents are not reachable through public links. When the application needs to show a file, it generates a presigned URL that expires after a short window. A copied or forwarded link therefore stops working quickly, and there is no permanent public address for a borrower's bank statement.
Document lifecycle and retention
Deleting a document in Lendquo is a soft delete. The file leaves the working view but is retained in storage rather than erased on the spot, which allows recovery when something was removed by mistake and preserves a record of what was uploaded. For a tool that sits inside deal review, that audit trail matters: a file is sometimes needed again weeks later, by a colleague, a funding partner, or a dispute.
How long a soft-deleted document is retained before it is permanently removed is defined by our data retention policy. If your organization works under its own retention requirements, write to support@lendquo.com and we will confirm how they map to the platform.
Data use and AI
Lendquo processes the documents you upload only to operate the service: extracting, structuring, and presenting the information your team underwrites against. The privacy policy has the full detail. Separately, this marketing website loads no third-party trackers or scripts, so simply reading about Lendquo does not share anything about you with advertisers or analytics providers.
Whether customer documents are ever used to train AI models is a fair question for any product in this category, and we intend to answer it on this page in plain language. Until the written policy is confirmed, email support@lendquo.com and we will answer it directly.
If your security review requires a list of the subprocessors that store or process data on our behalf, contact us and we will provide it.
Reporting a security issue
If you believe you have found a vulnerability in Lendquo, email support@lendquo.com with a description of what you observed and the steps to reproduce it. Please leave real borrower documents out of the report itself; a description and the affected page or workflow are enough to start.
The same address covers security questionnaires, due-diligence requests, and anything else your review needs in writing. We read every message and reply ourselves.