Keeping loan data safe
Security at Aila
Customer data is handled in private, encrypted, access-controlled workflows and used only to provide Aila's services. Aila does not use customer data to train public models.
SOC 2 Type 2 audit in progress
Audited by Sentry Assurance. Controls monitored continuously with Vanta.
What is SOC 2?
An independent audit standard from the AICPA. It checks how a company protects customer data across security, availability, and confidentiality.
A Type 2 report goes further than a one-time snapshot: the auditor tests whether those controls actually worked over a period of months.
See our current posture in the Trust CenterHow we protect your data
Private AI processing
AI processing runs through business API providers, never consumer chat products. Our AI providers operate under zero data retention for loan data.
Data protection
Customer data is encrypted in transit and at rest, and records are isolated by organization.
Access control
Role-based permissions limit account access. Stored files are accessed through controlled, time-limited links.
Deletion & retention
Aila retains customer data to run the service and permanently deletes it on verified request, subject to legal and compliance retention. Enterprise customers can set custom retention rules.
What we do, and what we don't
What Aila does
- Encrypts your data in transit and at rest
- Keeps each company's records separate
- Opens stored files only through links that expire
- Limits access with role-based permissions
What Aila does not do
- Sell your data, ever
- Use your data to train general-purpose AI models
- Let our AI providers keep your data
- Share your records with other Aila customers
Sub-processor list available on request.