Security at EZ Rate Sheet
Private lending data is some of the most sensitive financial information your business handles. We treat it that way.
Encryption
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256.
Password storage
Passwords are hashed with bcrypt at a cost factor of 12, with no legacy fallback. EZ Rate Sheet staff cannot read your password — ever.
Infrastructure
Hosted on Google Cloud Platform in US regions, behind a managed edge with automatic DDoS protection.
Access control
Granular role-based permissions across five roles (Admin, Organization Admin, Lender, Partner, User). Every team member sees only what their role requires.
Audit trail
Every change is timestamped and attributed to the user who made it, across both deal/data activity and authentication events.
Session security
Inactivity-based session timeouts, configurable per organization (1–24 hours).
Login protection
Automated detection and IP blocking on suspicious login patterns, with real-time alerting to administrators.
Payments
All payment data is processed through Stripe, a PCI Level 1 compliant provider. EZ Rate Sheet never stores raw card data.
Privacy
We never sell your data. See our Privacy Policy for details on what we collect and how it's used.
Found a vulnerability?
We take security reports seriously. Email [email protected] with details and we'll respond within one business day.
Ready to See It in Action?
Start your free trial and see how EZRS protects your lending data.
Start Your 5-Day Free Trial