Trust Center
What the loan officer’s assistant does with borrower data: where it runs, what it keeps of a call, who can reach it, and the documents a security review asks for.
Updated 2026-10-31
Proxara is a loan officer’s assistant. It hears the officer’s calls through its iPhone app, asks after each one whether to keep it, and writes up the calls they keep: the application details, their notes and the follow-up, in the app and by email, and the lead on their own Monday board if they connect one. The app runs in Proxara’s own AWS, in a US region, and needs nothing from the lender. When a lender connects Encompass, the CRM and Microsoft 365, the same work lands there, from an install in Azure, on access the lender’s administrators grant. This Trust Center describes both as they are built to run, for the people who review them.
At a glance
| Topic | How Proxara handles it |
|---|---|
| Where it runs | The app: Proxara’s own AWS, in a US region. A connected install: Proxara’s Azure or the lender’s own |
| Call audio | Proxara never receives it or saves it. Telnyx turns each person’s speech into words on its own servers. |
| What a call leaves | If the officer keeps it, its transcript, a summary, the details and notes, until they delete it. If not, its words are erased at once, or 30 minutes after the call if they don’t answer. |
| Social Security numbers | Whole in one sealed place for 14 days, then only the last four digits. In a connected install, straight into Encompass. |
| Reaching the lender’s systems | None until the lender connects them, then only through accounts and consent its administrators give, each scoped to the officers |
| The officer’s yes | The app sends nothing to a borrower or agent. In a connected install, credit, DU and the disclosures never run without it, and no message goes out without it until the officer lets that kind go |
| Encryption at rest | Encrypted AWS storage, with each call’s record sealed again under AES-256 |
| Encryption in transit | TLS 1.2 or higher on every connection |
| Secrets | AWS Secrets Manager, never in code or settings |
| Logs | 30 days, identifiers and counts only, never a value from a call |
| Training | Proxara trains no model on borrower data, and Microsoft’s terms say the same of the model that reads a kept call |
| Sub-processors | Telnyx, Microsoft, Amazon Web Services and Apple, and monday.com if an officer connects it |
| SOC 2 | Not held yet |
Where to start
- An IT or security lead: the security overview, the same two pages as the PDF.
- A security reviewer: Architecture, then Every connection and Access and logging.
- Compliance: the FTC Safeguards Rule, element by element.
- Anyone with a question: Security questions, answered in the open.
Documents
| Document | What it is | How to get it |
|---|---|---|
| Security overview | Two pages for your IT and security lead | Download the PDF |
| Infrastructure as code | The Bicep templates a connected install deploys, to read before anything runs | Request it |
| Software bill of materials | Every component and version in the current release | Request it |
| Mutual NDA | For anything your team wants to review under NDA | Request it |
| IT’s guide | What your administrators grant in Encompass, Microsoft 365, the CRM and the borrower app, and what each grant allows | Request it |
Contacts
- Security: security@proxara.ai, for a security question or to report a vulnerability.
- Privacy: privacy@proxara.ai, for anything about personal information.
- Everything else: support@proxara.ai.
Proxara, Inc., 28 Geary Street, Suite 650, San Francisco, CA 94108.