Built for regulated partners.
Your customers’ financial data is the most sensitive thing they’ll share with you. Here is how the platform handles it, and the documents your risk and compliance teams will ask for.
Read-only access
Customers connect Xero through Xero’s own sign-in with read-only access. The platform cannot change their books or move money, and customers can disconnect at any time.
Consent, per lender
Customer data is shared only with the organisation the customer has consented to, for the stated purpose. Funding cases go to another lender only with fresh consent.
Clear data roles
Each partnership sets out who is controller and who is processor. Lending Logic is named as processor in your privacy notice; that is the only place your customers see our name.
Explainable numbers
Figures are calculated by code from the ledger and every forecast is traceable to source. The AI explains results; it never invents a number.
How it’s protected
Hosted on Railway in EU data centres, with all traffic encrypted in transit. AI explanations use OpenAI, Google and Nebius under terms that exclude training on customer data. Cyber Essentials certification is in progress.
Registrations
Lending Logic Ltd is registered with the Information Commissioner’s Office (ZC162930). Lending Logic is not authorised by the FCA: the platform supports commercial lending to limited companies, which is generally outside FCA-regulated credit. Where a partnership involves regulated activity, we agree the permissions route with you before launch.
What risk and compliance teams ask
Who is the data controller?
Typically you, the partner, are controller for your customers’ data and Lending Logic is your processor. We agree data roles in writing in every partnership and name Lending Logic as processor in your privacy notice.
Can the platform change a customer’s accounts or move money?
No. Access to Xero is read-only. The platform cannot create, edit or delete records, and it cannot initiate payments.
Do you use our customers’ data for anything else?
Only anonymised, aggregated data, where the right to do so is written into the partnership agreement, to improve forecasts and publish sector-level research. Never anything that identifies a customer.
Is Lending Logic FCA regulated?
Lending Logic is not a lender. Lending to limited companies is generally outside FCA-regulated credit. Where a partnership involves regulated activity, we set out the permissions route before launch.
Request our security pack.
Data flows, data processing agreement template, security controls and our regulatory position, ready for your due diligence.