Security
Sonar has handled sensitive borrower data since its first loan, more than eight years ago. Security was designed in from the start, not added later.
Independently audited.
Data is encrypted in transit and encrypted at rest with AES-256. The most sensitive fields get a further layer of field-level encryption inside the database.
Your data sits in its own database. It is never mixed with another lender's.
Outside security firms test our code and infrastructure on a regular schedule, and we fix what they find.
Multi-factor authentication on every account. Single sign-on and role-based permissions for your team.
Every action on a loan file is logged, whether a person took it or the AI did. You can see who did what, and when.
Sonar runs on providers that hold their own security certifications, including Microsoft and Google.
The first questions a lender asks about AI are the right ones. Here are our answers.
Every loan is checked against your credit guidelines and your investors' requirements. The AI works each file inside them.
The AI does the work on the file. A person reviews it and makes the call on every underwrite and every credit decision.
Everything the AI does on a file is logged with the file, so your compliance team can review exactly what was done and why.
By default, your data never leaves our SOC 2 audited environments and never leaves the United States.
We expect a thorough review. We are happy to share our reports and answer your team's questions as part of due diligence.