Frequently asked questions

Aloan is an underwriting automation platform for commercial lenders. Our AI agents analyze borrower financials, extract key metrics, flag policy exceptions, and deliver decision-ready credit packages — turning days of manual spreading into minutes.

Aloan supports CRE loans, SBA lending, C&I lines of credit, equipment financing, and other commercial credit products. The platform handles the full range of borrower financial documents regardless of loan type.

Most platforms digitize forms. Aloan actually reads and analyzes financial documents — tax returns, rent rolls, operating statements, bank statements — then cross-validates data across documents and flags exceptions against your credit policy. You get a complete credit package, not just extracted fields.

No. Aloan handles the manual, repetitive work — document collection, financial spreading, data reconciliation — so your underwriters can focus on credit judgment and relationship management. Think of it as giving each underwriter a dedicated analyst.

We work with community banks, credit unions, and mid-market lenders. Whether you close 50 or 5,000 commercial loans per year, the platform scales to your volume without adding headcount.

Aloan processes 14+ document types including tax returns (1040, 1065, 1120), balance sheets, income statements, bank statements, rent rolls, operating statements (T-12), appraisals, personal financial statements, credit reports, lease agreements, purchase agreements, insurance certificates, and environmental reports.

Aloan reads and interprets the notes and footnotes in audited financial statements — not just the numbers on the face of the statements. This includes contingent liabilities, related-party transactions, off-balance-sheet items, and accounting policy disclosures that materially affect credit decisions.

Yes. You configure your policy parameters — DSCR minimums, LTV limits, occupancy thresholds, liquidity requirements, and more — and Aloan automatically flags exceptions against your specific guidelines. No generic one-size-fits-all rules.

Aloan extracts 100+ metrics including DSCR, LTV, debt-to-equity, occupancy rates, NOI, expense ratios, borrower liquidity, revenue trends, working capital, and leverage ratios. All metrics are mapped back to their source documents for full transparency.

Aloan compares data points across multiple documents to catch inconsistencies. For example, it validates that rent roll income matches the operating statement, that tax return revenue aligns with bank statement deposits, and flags variances above your configured thresholds.

Most lenders are live within 2-4 weeks. That includes configuring your credit policy, setting up document workflows, and connecting your data sources. Basic setups can go live in as little as 48 hours.

Aloan works alongside your LOS rather than plugging into it, and there is no LOS write-back today. Underwriters take completed spreads and credit memos into the workflow the bank already runs. REST APIs, webhooks, and export formats are available for custom reporting, and direct LOS integrations are on the roadmap.

We start by mapping your credit policy and underwriting guidelines into the platform. Then we configure document collection workflows, connect your systems, and run parallel testing with your team before going live. Your existing processes stay intact.

Yes. Aloan works alongside your current systems with no migration required. Your team keeps using the tools they know while Aloan automates the manual work behind the scenes. Lenders that want one system can run Aloan as the system of record instead.

Yes. Aloan is SOC 2 Type II certified, uses bank-level encryption, and is built specifically for regulated financial institutions. We carry cyber liability coverage and follow industry best practices for data protection. Our full SOC 2 Type II report is available under NDA through our Trust Center at trust.aloan.ai.

Every document, extraction, calculation, and exception flag is logged with a full audit trail. Examiners can trace any data point back to its source document. This is built for regulatory scrutiny, not just convenience.

Aloan holds SOC 2 Type II certification, covering Security, Availability, and Confidentiality. The platform maintains complete audit trails, supports examiner-ready reporting, and is designed for regulated financial institutions. AI processing runs through SOC 2 Type II certified providers (Gemini Enterprise, AWS Bedrock). The full report is available under NDA via trust.aloan.ai.

Aloan processes loan data through enterprise AI APIs from Google Cloud (Gemini Enterprise) and Amazon Web Services (Bedrock). Your data is encrypted in transit and at rest, processed in isolated inference environments, and never retained by AI providers after processing. Both providers contractually guarantee that customer inputs and outputs are never used to train or improve AI models.

Aloan uses Google Cloud (Gemini Enterprise) and Amazon Web Services Bedrock for AI processing. These are enterprise API services — the same infrastructure providers used by the world's largest financial institutions. We do not use consumer-grade AI services.

No. Both Google Cloud (Gemini Enterprise) and AWS Bedrock provide contractual guarantees that customer data is never used for model training. Data is processed, results are returned, and no copy is retained by the model provider.

Aloan holds SOC 2 Type II certification for its own platform. Aloan's AI inference providers - Google Cloud (Gemini Enterprise) and AWS (Bedrock) - maintain SOC 2 Type II, ISO 27001, FedRAMP, HIPAA eligibility, and GDPR compliance certifications. Our SOC 2 Type II report, provider compliance documentation, and security controls are available through our Trust Center at trust.aloan.ai or on request.

Aloan's architecture aligns with FFIEC guidance on technology risk management, OCC 2023-17 third-party risk management standards, and the Interagency Statement on Model Risk Management (SR 11-7). Full audit trails and source-document traceability support examiner review.

Yes. We can provide Aloan's own SOC 2 Type II report (under NDA), penetration test results, our providers' SOC 2 Type II reports, information security policies, data flow documentation, and additional security detail as part of your vendor management process. Most of this is available immediately through our Trust Center at trust.aloan.ai, or contact support@aloan.ai to request documentation.