Your data is encrypted both in transit and at rest, using the most robust encryption standards. Built for the compliance requirements of regulated lenders.
TLS 1.2+ in transit and AES-256 at rest, with HSM-backed keys rotated on a fixed schedule.
SAML, OIDC and SCIM with scoped roles, enforced MFA and deprovisioning in under a minute.
No borrower record leaves its tenant
Every request is scoped to your tenant before it reaches storage. Cross-tenant access is impossible by design.
An immutable event trail for every test, approval, export and agent query, retained and exportable.
Run on our cloud, a single-tenant instance, or inside your own VPC with region pinning.
Third-party penetration testing, continuous scanning and a live posture view your diligence team can read.
From fully managed cloud to a private VPC inside your own perimeter, AZ2 fits the deployment model your risk and IT teams already run.
Fastest to deploy. Logically isolated, SOC 2 Type II (in progress), live in days.
Dedicated infrastructure and keys for firms with stricter isolation requirements.
Runs inside your cloud perimeter. Your network, your controls, our platform.
Role-based access controls decide who can act, and the audit trail records every action taken, by a person or an agent, the same record your examiners and LPs see.
AZ2 relies on a short, disclosed list of vendors to run the platform and its AI features. This is a summary, the canonical, named list with purpose, data category, and region lives on the Legal page.
Model inference (document classification, extraction and drafting) runs on enterprise cloud AI endpoints operated by Anthropic, OpenAI and Google Cloud Vertex AI, under terms of zero data retention and no training on customer data.
View the full sub-processor list on the Legal page →SOC 2 report, pen test summary, DPA, and sub-processor list, available under NDA.
Request security packet