VerifiedReadiness Passport™Trust & ComplianceThe verification layer for home financing.
Regulated lenders, agents, and enterprise partners rely on ReadinessIQ to turn borrower readiness into an auditable, portable record. Here is exactly what that means — and what we will not claim until it is true.
SOC 2 Type II — in progress
Independent Type II audit underway with a Big-4 aligned auditor. Interim controls (access review, change management, incident response, vendor risk) are already operating. We will not represent SOC 2 as certified until the report is issued.
GLBA-aligned Safeguards
Written Information Security Program, encryption in transit (TLS 1.2+) and at rest (AES-256), field-level encryption on PII (SSN, DOB, account numbers), least-privilege access, and 24/7 anomaly monitoring — mapped to the GLBA Safeguards Rule (16 CFR 314).
Read GLBA Privacy NoticeNMLS-verified issuers
Every Loan Officer activated in the network is verified against the NMLS Consumer Access registry at onboarding, and license status is re-checked on a rolling cadence. Consumers can see the issuing LO's NMLS ID on any Verified Readiness Passport™.
TCPA & E-Sign captured on every touch
Every consent event (marketing contact, e-signature, autodial permission) records the disclosure version, UTC timestamp, and consumer IP. Records are exportable and consumer-viewable — the standard the FCC and CFPB expect during audits.
See consent disclosuresA Passport isn't just a signal. It's a financial guarantee.
Standard-tier Passports carry a $2,500 payout to the listing brokerage's next transaction if the verified buyer fails to close for a covered financing reason (denial after underwriting, condition failure, or reversal). Listing agents file claims in under two minutes with only the verify token — no login, no portal.
Coverage terms, exclusions, and payout mechanics are set by the executed brokerage agreement. Not an insurance contract; not a loan commitment.
Regulated-industry details
The short version below. Each item links to the full canonical notice that lenders, agents, and regulators can cite.
What we will not claim
- Not SOC 2 certified until the Type II report is issued — we say "in progress" and we mean it.
- Not a lender or broker. A Verified Readiness Passport™ is not a loan approval, denial, commitment, rate lock, or offer of credit.
- Not a credit repair organization. Scores are educational analysis based on real underwriting rules — not a promise of approval.
- No hidden data sales. Borrower data is never sold. See the GLBA notice for the full list of what we collect and why.
Security & Privacy Overview — download the packet
A 5-page PDF built for enterprise procurement, InfoSec, and compliance reviewers. Covers hosting, RLS & access controls, encryption, subprocessors, retention, GLBA/CCPA/GDPR posture, and DPA request flow.
The overview reflects app-visible controls enabled today. Not a compliance certification.