ExactCov

AI covenant monitoring

exactcov.com

Enterprise evidence

Insufficient enterprise evidence

Public information covers sso & provisioning, auditability, product effectiveness. Still unresolved: security assurance, access controls, data handling.

6 official sources · Fresh page review · Not independently tested

Sources reviewed 2026-10-16

3 / 7 areas with published evidence · 0 independently verified

Evidence & checks
Security assuranceNot found

Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.

SSO & provisioningCompany-published
UK / EU / US data residency · SSO / SAML · VPC or on-prem deploymentReviewed 2026-10-16View source
- SSO and SAML, custom MSA and DPA, VPC or on-premises deployment on Enterprise.Reviewed 2026-10-16View source

Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.

Access controlsNot found

Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.

AuditabilityCompany-published
- One audit trail for every miss, breach and waiver, so the report you sign is one you can defend.Reviewed 2026-10-16View source
| Audit logs | Access logs, processing timestamps | 12 months |Reviewed 2026-10-16View source

Before relying on it
Verify administrative and data-access events, retention and export.

Data handlingMixed claims — review
- Zero data retention and self-hosted storage options keep client papers off third-party infrastructure.Reviewed 2026-10-16View source
Permissions mirrored, zero data retention.Reviewed 2026-10-16View source
Zero data retention No templates requiredReviewed 2026-10-16View source
- Zero data retention: documents are never used to train models and are deleted when you remove them.Reviewed 2026-10-16View source

Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.

Reliability & supportNot found

Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.

Product effectivenessCompany-published
### BenchmarkingReviewed 2026-10-16View source
NAV change against the fund's own benchmark over the same window.Reviewed 2026-10-16View source

Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.

Published claims are not verified controls. No hands-on performance or security testing has been performed.

What we know

ExactCov extracts covenants from indentures and credit agreements and ships as an MCP server for chat-based querying within existing enterprise software.

Worth asking

Does their integration with generic enterprise chat tools provide sufficient auditability for institutional credit committees?

Sources

Evidence details

Enterprise controls

Enterprise claims found; security controls are unconfirmed.

Developer access

API availability has not been verified.

Last checked Oct 16, 2026

Company-published evidence, not an independent audit. Unknown means unverified.