Security & Compliance
Trust matters when the software runs real member money
LoanTabs is built for institutions that manage other people's money: per-institution data isolation, audit trails on loan events and role-based access are foundational, not bolted on.
How we approach trust
What's built into the platform
Multi-tenant isolation
Each institution's data (borrowers, loans, accounting records, staff) is logically separated: every request is authorized against the institution the signed-in user belongs to.
Data protection
Data is encrypted in transit over HTTPS and stored on AWS infrastructure with AWS-managed encryption at rest. Access is controlled through role-based permissions, so staff only see what their role requires.
Audit trail by design
Loan events — created, approved, disbursed, payment posted or reversed, status changed — are logged automatically, not as an optional add-on.
Loan approval rules
Loans and new borrowers route through approval rules you configure per branch, and every decision is logged.
Currency & regional settings
Each institution chooses its own operating currency and locale, so LoanTabs is not tied to a single hard-coded market.
Managed cloud infrastructure
LoanTabs runs on managed AWS cloud services rather than a computer in your office, so your loan book is available from any web browser.
In practice
How access and responsibility work
Inside an institution, access follows role. LoanTabs has 11 staff roles (admin, branch manager, loan officer, credit committee, accountant, cashier, auditor, collections officer, risk analyst, IT support and viewer), each with defined permissions, and branch data is kept separate so staff work within their own branch. Loan events are recorded, and an Exceptions and audit report lists late, edited or deleted payments and write-offs, so unusual activity is easy to find. See multi-branch loan management, roles and approvals.
Security is shared. We run the platform on managed AWS cloud services and protect data in transit and at rest. You control who has an account, which role each person holds, how strong their passwords are, and which devices they sign in from. Remove access promptly when staff leave, and give each person the lowest role that lets them do their job.
LoanTabs runs online, so your team can work from any web browser. Borrower payments go to your own accounts and your staff record each one against the loan, so LoanTabs holds your loan records and never sits in the flow of your borrowers' money. Subscription billing to LoanTabs runs through Pesapal, separately from your loan data.
Due diligence
Questions to ask any loan software vendor about security
- Where is my data hosted, and on which infrastructure provider?
- How is my data separated from other customers' data?
- Is data encrypted in transit and at rest?
- How is access controlled, and what activity is logged?
- What happens to my data if I leave, and can I export all of it?
- What do the vendor's privacy policy and data processing terms commit to?
Our answers to the first four are above. For the rest, read our data processing terms, and see our guide to cloud-based loan management software for the full list of questions and what a good answer looks like.
Have a security or compliance question?
Our team can walk your institution through data handling, isolation and access control in more detail.
Or reach us directly at support@loantabs.com. See also our Privacy Policy and Data Processing Terms.