Security
Vontive's platform carries a mortgage from application through servicing. That work involves borrowers' financial records, partners' customer relationships, and the reporting that capital providers depend on. Protecting this information is not a feature of the platform; it is a condition of operating it.
Protecting data
Vontive encrypts data in transit and at rest. Access to production systems and customer information follows least privilege—people receive the access their role requires, and no more—with access reviewed on a recurring schedule and revoked when a role ends.
Testing and monitoring
Vontive regularly tests its infrastructure and applications to identify and remediate vulnerabilities, and engages independent security specialists to test them from the outside. Production systems are monitored continuously. Findings are triaged by severity and fixed on defined timelines.
People and process
Everyone at Vontive completes security training, and confidentiality obligations apply to all staff. Vontive maintains a documented incident response plan and, if a breach of personal information occurs, notifies affected parties as required under applicable law—the same commitment made in the Privacy Policy.
Reporting a vulnerability
Vontive welcomes reports of potential security vulnerabilities. Send details to security@vontive.com, with enough information to reproduce the issue. Every report is reviewed and receives a prompt response.