Trust
Mortgage processing is consumer-finance work. Adeft is engineered to match the regulatory bar — not bolted on top of one. This page is where we show the receipts.
Human in the loop
Adeft’s agents draft and queue; they do not send. The approval surface is where the human-in-the-loop promise lives — and that surface is reversible, attributable, and auditable. There is no "autonomy mode."
Data handling
Customer files are processed for the purposes of operating Adeft on your behalf and stored under the retention windows you choose. We do not train foundation models on customer documents. Sub-processors are disclosed and contractually bound to the same standard.
Audit trail
Classify, extract, draft, approve, send — each emits a structured event with actor, timestamp, and content hash. The audit log is the source of truth for compliance reviews and is exportable on demand.
Deployment
Enterprise customers can run Adeft in their own VPC with customer-managed keys. Standard deployments live in SOC 2-aligned cloud environments. Either way, your data does not commingle with another customer’s.
Compliance posture
Independent audit underway with a Big-4 assessor. Type I attestation available on request under NDA.
Access controls, encryption-at-rest, encryption-in-transit, retention windows, and breach-notification process built around the Safeguards Rule.
Subject-access workflows for California consumers. Sub-processor list maintained at adeft.ai/security.
Stated in the MSA and the DPA. Includes anti-poisoning and prompt-isolation controls for shared inference endpoints.
