ExactCov
AI covenant monitoring
exactcov.comEnterprise evidence
Insufficient enterprise evidencePublic information covers sso & provisioning, auditability, product effectiveness. Still unresolved: security assurance, access controls, data handling.
6 official sources · Fresh page review · Not independently tested
Sources reviewed 2026-10-16
3 / 7 areas with published evidence · 0 independently verified
Evidence & checks
Security assuranceNot found
Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
SSO & provisioningCompany-published
UK / EU / US data residency · SSO / SAML · VPC or on-prem deploymentReviewed 2026-10-16View source
- SSO and SAML, custom MSA and DPA, VPC or on-premises deployment on Enterprise.Reviewed 2026-10-16View source
Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.
Access controlsNot found
Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.
AuditabilityCompany-published
- One audit trail for every miss, breach and waiver, so the report you sign is one you can defend.Reviewed 2026-10-16View source
| Audit logs | Access logs, processing timestamps | 12 months |Reviewed 2026-10-16View source
Before relying on it
Verify administrative and data-access events, retention and export.
Data handlingMixed claims — review
- Zero data retention and self-hosted storage options keep client papers off third-party infrastructure.Reviewed 2026-10-16View source
Permissions mirrored, zero data retention.Reviewed 2026-10-16View source
Zero data retention No templates requiredReviewed 2026-10-16View source
- Zero data retention: documents are never used to train models and are deleted when you remove them.Reviewed 2026-10-16View source
Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.
Reliability & supportNot found
Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.
Product effectivenessCompany-published
### BenchmarkingReviewed 2026-10-16View source
NAV change against the fund's own benchmark over the same window.Reviewed 2026-10-16View source
Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
Published claims are not verified controls. No hands-on performance or security testing has been performed.
What we know
ExactCov extracts covenants from indentures and credit agreements and ships as an MCP server for chat-based querying within existing enterprise software.
Worth asking
Does their integration with generic enterprise chat tools provide sufficient auditability for institutional credit committees?
Sources
- AI Covenant Extraction & Monitoring | ExactCovexactcov.com
- Security & Compliance | Zero Data Retention | ExactCovexactcov.com
- Vault | Every document, every version, every citation | ExactCovexactcov.com
- Zero Data Retention Policy | 24-Hour Auto-Delete | ExactCovexactcov.com
- Designing for the auditor, not the dashboard | ExactCovexactcov.com
- Innovation | Take one covenant register from pilot to the whole firm | ExactCovexactcov.com
Evidence details
Enterprise controls
Enterprise claims found; security controls are unconfirmed.
Developer access
API availability has not been verified.
Last checked Oct 16, 2026
Company-published evidence, not an independent audit. Unknown means unverified.