Role-based access
Super admins see every file. Reviewers see only the files assigned to them, or unassigned ones. Every access is checked on the server, not just hidden in the interface.
Security and privacy
Built for regulated lending
Loan files carry sensitive details: tax numbers, revenue, bank balances. Access, consent and retention are enforced in the system, not left to policy documents.
Controls
What is enforced in the product
Short-lived document links
Documents are stored privately and opened only through links that expire within minutes. Every view is logged.
Consent for each purpose
Collection, AI processing and voice transcription are consented to separately. Each consent is recorded with its version and time, and can be withdrawn.
An audit log
Status changes, reviewer decisions, document access and notes are recorded. Notes are logged by identifier, not by their text.
Deletion controls
Administrators can delete a record or document, reset a business's data, or delete a user. Nothing is deleted for an application that has been submitted to a lending partner.
Clean sign-out
Signing out of the app clears the session and cached photos and documents from the phone, so whoever signs in next starts fresh.
Words stay out of logs
What an applicant says to HANA is saved to their file for review. It is not written into system logs.
Private by default
Uploaded files are never reachable by a public address, and a reviewer's access is limited to what their role allows.
Designed around the Data Privacy Act
Built with the Philippine Data Privacy Act in mind. Your data protection officer reviews our processing terms before any pilot begins.
Agreed with each institution
Some things are decided together, not assumed
Hosting location and data residency, retention periods, integration with your systems and the exact scope of any pilot are confirmed with each institution during onboarding, together with your own legal and data protection team.
We make no claim of certification here. Ask us for the current position on any control your policy requires.