Trust Center

Security and compliance, built into the lending stack.

Banks, platforms, and brokers trust Loanspark to move sensitive borrower and partner data. We hold ourselves to a SOC 2 Type II standard, monitor our controls continuously, and publish our security posture for review — so your diligence team can move quickly.

View Live Trust Center

Security you can verify, not just trust.

Independently audited and continuously monitored.

Independently audited and monitored

SOC 2 Type II — audited by an independent firm and continuously monitored via Vanta, with our live posture published on the Trust Center.

Encrypted and access-controlled

Customer data encrypted in transit and at rest, with MFA-enforced, least-privilege access to all production systems.

Private by default — never sold

We never sell personal information. Data is handled under least-privilege, role-based controls across every environment we operate.

Built for your review

Security and compliance for the people who vet us.

Whether you run vendor risk for a bank or you're integrating our API, the answers you need are here — and verifiable on our live Trust Center, not just described on a page.

Diligence-ready by design

For risk & compliance: Active lending licenses across 47 states, a SOC 2 Type II report available under NDA, board-level security oversight, annual risk assessments, and documented policies — everything your vendor-review checklist asks for, in one place.

Controls your team can verify

For engineering & security: Encryption in transit and at rest, MFA-enforced least-privilege access, intrusion detection, a formal development lifecycle, and continuous control monitoring — published live through our Trust Center.

Company & licensing

Licensed, examined, and accountable.

Loanspark, LLC is a financial technology company supporting commercial and business-purpose lending programs through licensed capital providers and financial institutions. Loanspark does not operate as a consumer retail lender.

NMLS ID

2260965

Lender status

Equal Opportunity Lender (business-purpose and commercial credit)

Coverage

Licensed in 47 U.S. states

State license

California Finance Law Broker License #60DBO-155057

Certification

SDO-certified organization

Infrastructure

Hosted on DigitalOcean, U.S.-based cloud infrastructure

Security program

A documented program, monitored continuously.

Our controls span infrastructure, product, organizational, and internal procedures — independently audited to a SOC 2 Type II standard and continuously monitored. A representative set is shown below; the full, live list is on our Trust Center.

Infrastructure security

Production database, network, and application access restricted to authorized users with a business need

Unique authentication enforced via credentials and SSH keys

Encryption-key access restricted to a documented business need

Remote access requires MFA over approved encrypted connections

Intrusion detection with continuous network monitoring

Product security

Sensitive customer data encrypted at rest

Confidential data encrypted in transit over public networks

Annual control self-assessments with SLA-bound remediation

Formal development lifecycle (SDLC) governing all changes

Organizational security

Anti-malware deployed, updated, and logged across systems

Mobile device management (MDM) on company devices

Portable and removable media encrypted

Visitor and physical-access procedures enforced

Internal procedures & governance

Annual risk assessments, including fraud risk

Board-level security oversight with a documented charter

Data-center access reviewed at least annually

Cybersecurity insurance maintained

See every control and its current status on the live Trust Center →

Your data is protected — and never sold.

We do not sell personal information. Data is encrypted in transit and at rest, access follows least-privilege and role-based controls, and systems are continuously monitored. These protections apply across every environment we operate - and all personnel complete security-awareness training.