Skip to content
LoanPacket

Trust center

Everything a bank vendor management team or a brokerage's largest client needs, in one place.

Documents

SOC 2 Type II report
Available under NDA
Observation period Jan to Dec 2025. Issued January 2026.
ISO 27001 certificate
Public
Certified March 2026; surveillance audit scheduled March 2027.
Penetration test summary
Available under NDA
Annual third-party test; last completed June 2026, no critical findings open.
Security questionnaire (SIG Lite)
On request
Pre-completed SIG Lite and CAIQ responses.
Business continuity plan
Available under NDA
RPO 1 hour, RTO 4 hours, tested semi-annually.
Data flow diagram
On request
Document ingestion through export, with encryption boundaries.
Request documents

Changelog

  1. 2026-09-10
    SOP rule library 7.1.4

    Updated guaranty fee schedule for FY2027 and partial change of ownership guarantor retention.

  2. 2026-07-02
    Form 1919 template revision

    Adopted the July 2026 SBA form revision; prior version retired after 10-day overlap.

  3. 2026-05-14
    Add-back catalog v3

    Added related-party rent and non-operating asset categories; refined defensibility criteria.

  4. 2026-03-20
    ISO 27001 certification

    Certificate issued; scope covers the platform and corporate systems.

Data residency

United States (us-east-1 primary, us-west-2 replica) by default. India (ap-south-1) available for customers with offshore processing teams. Residency is set per account and enforced at the storage layer.