Security

Built for the data your borrowers trust you with.

Lucia is designed around three commitments: each lender in its own tenant, no model training on your data, and a complete audit trail from intake to payoff.

01 The controls

Six rules that govern every file on the platform.

Each rule applies from the moment a document enters Brain Link to the day the account closes.

01 Each lender in its own tenant Your borrowers, documents, and loan book are isolated from every other lender on the platform. No data crosses tenant boundaries.
02 Your data never trains a model Lucia uses AI to draft memos, test covenants, and answer questions about your book. It never feeds your data into model training—not ours, not a third party's.
03 Logged from intake to payoff Every upload, every memo generation, every access event, every edit, every export, and every sign-in is written to the audit trail.
04 Encrypted at rest and in transit Files and records are encrypted with AES-256 at rest. Every connection runs over TLS 1.3.
05 Stored in the United States All data is processed and stored in US-based infrastructure. No offshore processing.
06 Role-based access Credit officers, analysts, operations staff, and borrowers see only what their role permits. Borrowers access their own statements and uploads through the Borrower Portal—nothing else.

Commitments

The short version.

AES-256 TLS 1.3 US-only RBAC Audit trail No training
02 Your data

Four questions every lender asks.

Direct answers, without overpromising.

01

Residency

All data processed and stored in the United States.

02

Export

Your data is available for export on request.

03

Retention

Data is retained while your account is active. Deletion is available on request after account closure.

04

Incident response

Lucia notifies affected lenders in the event of a security incident.

03 The file

From upload to citation in five steps.

Every document follows the same path—encrypted, isolated, and auditable at each stage.

Document lifecycle Five stages
  1. 01
    Upload via Brain Link

    Uploaded through the secure portal by the borrower or your team.

  2. 02
    Encrypted at rest

    Encrypted with AES-256 the moment it lands.

  3. 03
    Read in your tenant

    Classified inside your isolated tenant.

  4. 04
    Cited in the memo

    Extracted figures footnoted to the page they came from.

  5. 05
    Kept while the account is active

    Encrypted and accessible in your tenant for the life of the account.

04 Compliance

Where we are today.

Lucia is built for regulated data. Formal certification is on the roadmap.

  • Security-first architecture in place—Per-tenant isolation, encryption, role-based access, and audit logging are live across the platform.
  • SOC 2 on the roadmap—Independent audit of security controls and organizational policies.

Portal access

The book is under one set of rules.

Sign in to a loan book designed around isolation, encryption, and a complete audit trail.

Sign in

Borrowers · your portal is at sign in

Security questions · sage@esapiens.ai