Security controls that are implemented today
A plain list of what the platform does. We describe controls, not credentials.
Controls in the platform
-
Personal data masked before AI
Personal details are masked before a statement reaches the language model, and processing stops if masking cannot be done.
-
Signed webhooks
Get notified when processing completes, needs review or fails. Every webhook is signed with HMAC-SHA256.
-
Team access and API keys
Add team members, issue API keys with scopes, and protect portal sign-in with two-factor authentication.
-
Versioned decision policies
Decision rules are versioned and every decision keeps an append-only trace. The engine is advisory: it never approves or disburses a loan.
We do not list certifications, audit reports, hosting regions or compliance badges on this page, because we will not publish a claim we cannot evidence.
If your security team needs specific answers, ask us. We will respond in writing.
What happens in a demo
- Bring a sample statementWe run it through DharaIQ with you, start to finish.
- Read the results togetherScore, cash-flow signals and tamper checks, explained line by line.
- Plan how it fitsAPI or portal, security questions and how billing would work for your team.