CovenantIQ

Automated covenant monitoring

Enterprise evidence

Insufficient enterprise evidence

Public information covers auditability, reliability & support. Still unresolved: security assurance, sso & provisioning, access controls.

5 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-16

2 / 7 areas with published evidence · 0 independently verified

Evidence & checks

Security assuranceMixed claims — review

## SOC 2 Type II CertifiedReviewed 2026-10-16View source

CovenantIQ is certified SOC 2 Type II by independent audit and assessment by Prescient Assurance.Reviewed 2026-10-16View source

CovenantIQ has achieved SOC 2 Type II certification through independent audit by Prescient Assurance — covering security, availability, and confidentiality controls across every layer of the platform.Reviewed 2026-10-16View source

We've achieved SOC 2 Type II certification through independent audit by Prescient Assurance — covering security, availability, and confidentiality controls across every layer of the platform.Reviewed 2026-10-16View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningNot found

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityCompany-published

Automate scheduled reporting covenants with configurable cadence, borrower attestation workflows, and a complete audit trail — so nothing falls through the cracks.Reviewed 2026-10-16View source

Automate scheduled covenant submissions with configurable cadence, borrower attestation workflows, and a complete audit trail — so nothing falls through the cracks.Reviewed 2026-10-16View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingNot found

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportCompany-published

Our documented incident response plan is tested each year through tabletop exercises, ensuring we are ready to detect, contain, and resolve issues if they arise.Reviewed 2026-10-16View source

Built-in redundancy across regions and availability zones, strong disaster recovery options, and high uptime ensure we can reliably handle large volumes of financial data.Reviewed 2026-10-16View source

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessNot found

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

CovenantIQ focuses on automated extraction, covenant testing, and an attestation workflow for emerging and mid-market lenders.

Worth asking

How does their attestation workflow handle extreme variance in borrower financial reporting formats?

Sources

Evidence details

Enterprise controls

## SOC 2 Type II Certified CovenantIQ is certified SOC 2 Type II by independent audit and assessment by Prescient Assurance ## SOC 2 Type II Certified

Developer access

API availability has not been verified.

Last checked Oct 16, 2026

Company-published evidence, not an independent audit. Unknown means unverified.