Encryption and keys

Every file is encrypted wherever it is kept and wherever it moves, under keys your shop holds.

At rest

Documents, page images, the facts read from them and the loan’s state are stored encrypted with AES-⁠256 in your own storage account. The keys are customer-managed keys in your own Key Vault, so your team can rotate them on its own schedule, and revoking a key makes everything under it unreadable at once. Proxara never holds a key.

In transit

Every connection uses TLS 1.2 or higher: your team’s browser to the install, the install to your LOS, to DU and LP and to your lender portals, and the parts of the install to one another. The install’s single address answers only on HTTPS, behind your sign-in.

Keys and secrets

Every secret the install uses, including your LOS credentials, lives in your Key Vault. The install’s parts reach Key Vault with managed identities, so there is no password in a configuration file and nothing to copy out of one. Your administrators can see, rotate and revoke each secret.

Every file scanned

A file is scanned for malware before it is opened, rendered or read, whether it came from your LOS or was added by hand. A file that fails is held, the officer is told why, and nothing in it is read.