CoreFinTech

Compliance

Personal data and operating boundaries

The platform handles sensitive personal data, so the boundaries must be explicit and verifiable.

Basis for processing

Data is provided by the data subject when registering a financing need, together with a consent record that stores the exact version of the text they read. Disclosure to a third party happens only after a separate act of consent for that specific party.

Every access leaves a trace

Each time a party views or downloads a borrower's document, the identity and time are recorded — and the borrower can read that log.

Third-party data sources

The platform connects only to licensed data providers, and only where a valid consent from the data subject is on file. If either condition is missing, the call is not made.

Operating boundaries

The platform is not a credit institution. It does not take deposits, does not lend, and is not a payment intermediary for loans between the parties.