Frequently asked questions

Aloan is the AI-native commercial loan origination system for community banks, credit unions, and commercial lenders. It collects the borrower's documents, spreads the financials, checks the deal against your credit policy, drafts a source-cited credit memo and routes it for sign-off, so days of manual spreading become minutes and your team reviews and decides.

Yes. A legacy LOS is a system of record: it holds status, documents and final numbers the bank keys in. Aloan is a system of action: it takes the application, collects and reads the documents, spreads the financials, checks policy, drafts the memo, routes it for sign-off and monitors covenants, and your team reviews and decides. Run Aloan as your commercial LOS, or alongside the one you already have. Multi-tier approval authority, decline recording and the booking-sheet handoff are on the Q4 2026 roadmap.

Aloan supports CRE loans, SBA lending, C&I lines of credit, equipment financing, and other commercial credit products. The platform handles the full range of borrower financial documents regardless of loan type.

A legacy LOS records what your team keyed in, and a spreading tool digitizes forms. Aloan reads and analyzes financial documents — tax returns, rent rolls, operating statements, bank statements — then cross-validates data across documents and flags exceptions against your credit policy. You get a complete credit package, not just extracted fields.

No. Aloan handles the manual, repetitive work — document collection, financial spreading, data reconciliation — so your underwriters can focus on credit judgment and relationship management. Think of it as giving each underwriter a dedicated analyst.

We work with community banks, credit unions, and mid-market lenders. Whether you close 50 or 5,000 commercial loans per year, the platform scales to your volume without adding headcount.

Aloan processes 14+ document types including tax returns (1040, 1065, 1120), balance sheets, income statements, bank statements, rent rolls, operating statements (T-12), appraisals, personal financial statements, credit reports, lease agreements, purchase agreements, insurance certificates, and environmental reports.

Aloan reads and interprets the notes and footnotes in audited financial statements — not just the numbers on the face of the statements. This includes contingent liabilities, related-party transactions, off-balance-sheet items, and accounting policy disclosures that materially affect credit decisions.

Yes. You configure your policy parameters — DSCR minimums, LTV limits, occupancy thresholds, liquidity requirements, and more — and Aloan automatically flags exceptions against your specific guidelines. No generic one-size-fits-all rules.

Aloan extracts 100+ metrics including DSCR, LTV, debt-to-equity, occupancy rates, NOI, expense ratios, borrower liquidity, revenue trends, working capital, and leverage ratios. All metrics are mapped back to their source documents for full transparency.

Aloan compares data points across multiple documents to catch inconsistencies. For example, it validates that rent roll income matches the operating statement, that tax return revenue aligns with bank statement deposits, and flags variances above your configured thresholds.

Most lenders are live within 2-4 weeks. That includes configuring your credit policy, setting up document workflows, and connecting your data sources.

Yes. Aloan can integrate with your existing stack, including your LOS, through its REST API and webhooks, and no integration is required to start. Many banks begin by running Aloan alongside the LOS they already have, with underwriters taking completed spreads and credit memos into the approval workflow the bank already runs, and connect the two later. Export formats are available for custom reporting.

We start by mapping your credit policy and underwriting guidelines into the platform. Then we configure document collection workflows, connect your systems, and run parallel testing with your team before going live. Your existing processes stay intact.

Yes. Run Aloan as your commercial LOS, or alongside the one you already have. In either mode there is no migration: your team keeps its approval chain, its core and the tools it knows, and Aloan does the document, spreading and credit memo work.

Yes. Aloan is SOC 2 Type II certified, uses bank-level encryption, and is built specifically for regulated financial institutions. We carry cyber liability coverage and follow industry best practices for data protection. Our full SOC 2 Type II report is available under NDA through our Trust Center at trust.aloan.ai.

Every document, extraction, calculation, and exception flag is logged with a full audit trail. Examiners can trace any data point back to its source document. This is built for regulatory scrutiny, not just convenience.

Aloan holds SOC 2 Type II certification, covering Security, Availability, and Confidentiality. The platform maintains complete audit trails, supports examiner-ready reporting, and is designed for regulated financial institutions. AI processing runs through SOC 2 Type II certified providers (Gemini Enterprise, AWS Bedrock). The full report is available under NDA via trust.aloan.ai.

Aloan processes loan data through enterprise AI APIs from Google Cloud (Gemini Enterprise) and Amazon Web Services (Bedrock). Your data is encrypted in transit and at rest, processed in isolated inference environments, and never retained by AI providers after processing. Both providers contractually guarantee that customer inputs and outputs are never used to train or improve AI models.

Aloan uses Google Cloud (Gemini Enterprise) and Amazon Web Services Bedrock for AI processing. These are enterprise API services — the same infrastructure providers used by the world's largest financial institutions. We do not use consumer-grade AI services.

No. Both Google Cloud (Gemini Enterprise) and AWS Bedrock provide contractual guarantees that customer data is never used for model training. Data is processed, results are returned, and no copy is retained by the model provider.

Aloan holds SOC 2 Type II certification for its own platform. Aloan's AI inference providers - Google Cloud (Gemini Enterprise) and AWS (Bedrock) - maintain SOC 2 Type II, ISO 27001, FedRAMP, HIPAA eligibility, and GDPR compliance certifications. Our SOC 2 Type II report, provider compliance documentation, and security controls are available through our Trust Center at trust.aloan.ai or on request.

Aloan's architecture aligns with FFIEC guidance on technology risk management and OCC 2023-17 third-party risk management standards. SR 11-7, the 2011 model risk guidance, was superseded on April 17, 2026 by SR 26-2 and OCC Bulletin 2026-13, which are risk-based and leave generative and agentic AI out of scope. Full audit trails and source-document traceability support examiner review.

Yes. We can provide Aloan's own SOC 2 Type II report (under NDA), penetration test results, our providers' SOC 2 Type II reports, information security policies, data flow documentation, and additional security detail as part of your vendor management process. Most of this is available immediately through our Trust Center at trust.aloan.ai, or contact support@aloan.ai to request documentation.