Security at Alnex
Mortgage files are some of the most sensitive documents a business handles. Alnex is built for that reality: encryption everywhere, database-enforced tenant isolation, a minimal and fully named vendor surface, and AI that never trains on your data — with an audit trail on everything, including us.
US-based data centers
Customer data is hosted, stored, and processed in Microsoft Azure data centers in the United States — infrastructure built for regulated workloads. AI analysis is performed by US-based providers under the terms below.
- Hosting, storage, database, and document OCR run in US Azure regions
- Designed to support US data-residency requirements for mortgage data
- Built for fast, reliable performance for US-based lending teams
Subprocessors — the complete list
No one else. No ad-tech, no data brokers.
Every vendor named, every purpose stated
Alnex runs on a deliberately small set of infrastructure providers — and nothing else. No ad-tech, no analytics sprawl, no data brokers. Each subprocessor handles only what its function requires, under contractual confidentiality and data-protection terms.
- Microsoft Azure — hosting, storage, database, document OCR, and Azure OpenAI processing
- Anthropic, OpenAI, and Cohere — AI document analysis and retrieval, under terms that do not permit training on customer content
- Clerk — authentication · Stripe — subscription billing (we never store card numbers)
- We never sell data, and we share it with no one beyond this list — consistent with our Privacy Policy
Encryption in transit and at rest
All customer data is encrypted in transit and at rest on Microsoft Azure. Data is decrypted only inside the service boundary, to perform the analysis you ask for.
- TLS 1.2+ for all network traffic
- AES-256 encryption at rest
- Keys in Azure Key Vault; services authenticate with managed identities — no keys in code
- Key-based storage access is disabled in production; access is identity-based
In Transit
TLS 1.2+
At Rest
AES-256
Key Management
Azure Key Vault + managed identities
Tenant Isolation
Org-scoped app layer + PostgreSQL row-level security (forced)
Audit Logs
Every action on a loan file — including platform-operator access
Tenant isolation
Role-based access
Audit logs
SSO + MFA
Isolation enforced in the database, not just the app
Every query is scoped to your organization in the application layer and backstopped by PostgreSQL row-level security forced on every tenant table — a second, database-enforced wall between customers.
- Three app roles (loan officer, underwriter, org admin) managed by your administrators
- Enterprise-grade sign-in: SSO with restricted, operator-provisioned onboarding and MFA
- Platform-operator access is limited to a single designated identity — and its access to customer files is itself audit-logged
- Least-privilege cloud identities; CI/CD authenticates via OIDC with no stored cloud secrets; a web application firewall in prevention mode fronts the only route to the API
AI reads, computes, and explains — it never decides
Alnex's core design rule: lending outcomes come from a deterministic rules engine running your organization's thresholds — never from an AI model.
- Every extracted figure is cited to the exact page of the source document
- Decision records — facts, provenance, model chain, policy thresholds, engine version — export on demand
- Per-file AI usage is metered and inspectable
- AI providers operate under no-training-on-customer-content terms
- Borrower PII in the OCR pipeline is cached briefly (1 hour) and never retained outside your loan files
Our control program is aligned to SOC 2 trust criteria and designed to support our customers' GLBA Safeguards obligations. Security reviews, vendor diligence, and questionnaires are welcome — that's what this page is for.
Found something? Report vulnerabilities to security@alnex.ai — we acknowledge every report.
Security FAQ
Answers for security and risk teams
These are the most common questions we receive from security and risk stakeholders evaluating Alnex.ai.
Questions About Security?
Work directly with our security team
We regularly collaborate with security, risk, and compliance stakeholders at mortgage firms. Share your requirements and we'll walk through how Alnex.ai fits your security needs.