CredCore

SOC 2 Type IIReviewed 2026-10-28View source

SOC 2 Type IIReviewed 2026-10-28View source

SOC 2 and ISO 27001 cover information security management.Reviewed 2026-10-28View source

SOC 2 and ISO 27001 fReviewed 2026-10-28View source

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Each data piece encrypted individually for maximum security and tenant isolationReviewed 2026-10-28View source

Role-Based AccessReviewed 2026-10-28View source

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

If an amendment modifies the margin definition six months later, the team must identify affected fields, update them, and maintain an audit trail.Reviewed 2026-10-28View source

This audit trail is necessary to explain changes to an auditor in subsequent years.Reviewed 2026-10-28View source

In practice, this means the firm's documents are not pooled with other clients' data or used to improve shared models, backed by contractual terms and an audit trail.Reviewed 2026-10-28View source

Before relying on it
Verify administrative and data-access events, retention and export.

Organizations that deploy the Add-in and require a data processing agreement are covered by the data-processing provisions of the CredCore Terms & Conditions and any executed MSA.Reviewed 2026-10-28View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Investor demand, sized against real covenant benchmarks daily.Reviewed 2026-10-28View source

Private terms, benchmarked against public market comps instantly.Reviewed 2026-10-28View source

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.