Onboarding design partners now.Talk to us
truluce
Book a demo
Security and deployment

Built for the questions your bank partner will ask.

Isolated, auditable and explainable. We're in design-partner preview; this is how Truluce is built for launch.

Hosted by Truluce
The fastest start
Truluce cloud · United States
Lender A
You
Lender B
Separate data and keys for every customer
In your cloud
For banks and larger lenders
Signed releases from Truluce
Your cloud account
Truluce
Your model account
Your case data
Case data never leaves your environment

How we handle your data.

No training on your data
Not ours, not a model provider's.
Personal data redacted
Removed before anything reaches the model.
Isolated per customer
Separate data, keys and secrets.
Encrypted
In transit and at rest.
Audit log
Every view, analysis, decision and reveal.
Retention you set
Kept as long as your policy says.
Face matching

One face behind many identities, with controls to match.

By default, Truluce flags a picture reused from another application. Face matching, which compares a selfie with every earlier applicant's, is optional, because biometric data has its own laws.

Consent wording included
For your application flow, to adapt with your counsel.
Off by state
Turn it off wherever you'd rather not use it.
Templates, not photos
Encrypted, and deleted along with the image.
Retention you set
Templates kept only as long as your policy says.
Never for training
Faces never train any model.
People see the matches
The agent only reports a reused picture.
Face matching
Settings, by applicant's state
  • Every other stateOn
  • IllinoisOff
  • TexasOff
  • WashingtonOff

An example setting, not legal advice: which states to exclude is your counsel's call.

Model risk

Governance comes with the product.

Our CEO led Model Risk Management at American Express.

  • Playbook releases signed by a named Risk lead
  • Every memo reproducible from its run
  • A backtest before any release goes live
  • Agreement, missed fraud and drift, monitored
  • No credit data in fraud recommendations

Compliance roadmap.

We're early, and we say so.

  1. Design partners
    Now
  2. Penetration test
    Independent firm
  3. SOC 2 Type I
    Report
  4. General availability
    A DPA with every customer
  5. SOC 2 Type II
    After the audit window
Talk to us about security