Security & data
How we host and protect lender data
A plain description of what we do today. We'll add detail as onboarding opens.
Hosted by usDirectWare runs on servers we operate for every lender. There is nothing for a lender to install, and no self-hosted option.
Each lender's data kept separateEvery lender's data is kept apart from every other lender's.
Encrypted in transitThe DirectWare sign-in page is served over HTTPS (TLS) with HTTP Strict Transport Security enabled (checked Oct 27, 2026).
Access by roleUser rights management controls what each user can see and do; pipeline dashboards are scoped to each user.
What we don't claim
We don't hold SOC 2, ISO 27001 or other security certifications at this time, and this page makes no claim about them. Questions about encryption at rest, backups, data retention or audits can go to our team and will be answered in writing.