Security

Our approach

Collect only what is needed. Keep sensitive information on the server, not in your browser. Give access only to the people and services that need it.

Accounts and access

Customer workspaces will require real authentication. Each case is accessible only to the applicants and staff authorised on it. Co-applicant access must be granted explicitly.

Awaiting owner input: Confirm authentication provider and multi-factor options.

Documents

Uploaded documents will be stored privately, with access checked on every request and short-lived download links.

Awaiting owner input: Confirm storage provider, encryption and retention.

Protecting yourself from scams

We will never ask for your online banking password or one-time codes. If a message claiming to be from Onlend seems unusual, do not click links in it; contact us through this website instead.

You can learn more about scams at Scamwatch.

Reporting a security issue

If you believe you have found a security issue, please contact us so we can look into it.

Awaiting owner input: Supply security contact address and disclosure process.