Snapshot 13505
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Xactus | Trust Center At Xactus, trust and transparency are fundamental to how we operate and innovate. Through our Intelligent Verification technology, we’re transforming the mortgage process with solutions built to be secure, compliant, and efficient from the ground up. This center provides insight into the comprehensive practices and policies we follow to protect your data and ensure reliability at every step. trust@xactus.com Privacy PolicyOpens in new tab Xactus believes that information security is a core pillar of our products and services. Xactus has robust data security practices integral to our product, service engineering, and service delivery. Please be advised that the materials provided by Xactus, LLC are confidential and proprietary to Xactus and not intended to be shared or disclosed to any third party without the prior written consent of Xactus. Compliance SOC 2 Type II PCI-DSS 4.0 NIST CSF 2.0 Massachusetts 201 CMR 17.00 Resources View all Certifications & Attestations SOC 2 Type II (2025-2026) SOC 2 Bridge Letter (April, 2026) PCI DSS 4.0.1 - Attestation of Compliance Security Assessment Statements Summary of 2026 H1 External Security Assessment Testing Statements Disaster Recovery and Business Continuity Testing Summary (H1 2026) Incident Response Testing Summary (H2 2025) Insurance Certificate of Liability Insurance (2026-2027) Policies Information Sharing Policy Other resources Welcome to the Xactus Trust Center Xactus AI Client Advisory Xactus 360 Single-Sign On FAQ Controls View all Infrastructure security Unique production database authentication enforced Access control procedures established Production database access restricted View 384 more Infrastructure security controls Organizational security Asset disposal procedures utilized Portable media encrypted Anti-malware technology utilized View 9 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 32 more Internal security procedures controls Data and privacy Data retention procedures established Customer Data Retention and Disposal Data classification policy established Data collected Customer personally identifiable information Credit card information Subprocessors View all Amazon Web Services • Cloud Hosting Services United States Microsoft Azure • Cloud provider Office 365 • Collaboration Five9 • Contact Center FAQ View all Updates View all General New SOC 2 Type II report available Published September 23, 2026 Xactus' latest SOC 2 Type II report is now available for request on our Trust Center. The report covers our Xactus360 System for the period July 1, 2025 through June 30, 2026 and was issued by Sensiba LLP. It covers the Security, Availability, and Confidentiality trust services criteria. Compliance SOC 2 Bridge Gap Letter Available Upon Request Published April 15, 2026 The SOC 2 bridge gap letter is available and requestable through the Trust Center as of April 15, 2026. It has been added as part of our available compliance documentation. Security Axios - Supply Chain Compromise Published March 31, 2026 Xactus does not utilize any of the affected versions of Axios, and thus, is unaffected by the most recent supply chain compromise. Security CVE-2026-29000 - Vulnerability in "pac4j-jwt" Published March 5, 2026 Xactus does not utilize the "pac4j-jwt" library and, as such, is unaffected by the recently announced vulnerability (CVE-2026-29000.)