Snapshot 256215
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Xactus | Trust Center At Xactus, trust and transparency are fundamental to how we operate and innovate. Through our Intelligent Verification technology, we’re transforming the mortgage process with solutions built to be secure, compliant, and efficient from the ground up. This center provides insight into the comprehensive practices and policies we follow to protect your data and ensure reliability at every step. trust@xactus.com Privacy PolicyOpens in new tab Xactus believes that information security is a core pillar of our products and services. Xactus has robust data security practices integral to our product, service engineering, and service delivery. Please be advised that the materials provided by Xactus, LLC are confidential and proprietary to Xactus and not intended to be shared or disclosed to any third party without the prior written consent of Xactus. Compliance SOC 2 Type II PCI-DSS 4.0 NIST CSF 2.0 Massachusetts 201 CMR 17.00 Resources View all Certifications & Attestations SOC 2 Type II (2025-2026) PCI DSS 4.0.1 - Attestation of Compliance Security Assessment Statements Summary of 2026 H1 External Security Assessment Testing Statements Disaster Recovery and Business Continuity Testing Summary (H1 2026) Incident Response Testing Summary (H2 2025) Insurance Certificate of Liability Insurance (2026-2027) Policies Information Sharing Policy Other resources Welcome to the Xactus Trust Center Xactus AI Client Advisory Xactus 360 Single-Sign On FAQ Controls View all Infrastructure security Unique production database authentication enforced Unique account authentication enforced Production application access restricted View 385 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Employee background checks performed View 9 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 34 more Internal security procedures controls Data and privacy Data retention procedures established Customer Data Retention and Disposal Data classification policy established Updates View all Security Barracuda Email Security Gateway Vulnerabilities (CVE-2026-116606 & CVE-2026-111560) Published November 3, 2026 Xactus is aware of the critical vulnerability affecting some Barracuda products. Xactus does not use Barracuda platforms and, as such, is not affected. Security PHP2Shell Vulnerability (CVE-2026-109618 & CVE-2026-109619) Published October 22, 2026 Xactus is aware of the critical remote code execution vulnerabilities in PHP, collectively known as PHP2Shell, disclosed in October 2026. Our security team identified all Xactus systems affected by these vulnerabilities and applied the vendor-provided patches. None of the affected systems hosted or processed non-public personal information (NPI). Security Citrix NetScaler - CVE-2026-88771 through CVE-2026-88778 Published September 28, 2026 Xactus does not use Citrix NetScaler products, so these vulnerabilities do not affect our environment. General New SOC 2 Type II report available Published September 23, 2026 Xactus' latest SOC 2 Type II report is now available for request on our Trust Center. The report covers our Xactus360 System for the period July 1, 2025 through June 30, 2026 and was issued by Sensiba LLP. It covers the Security, Availability, and Confidentiality trust services criteria. FAQ Subprocessors View all Amazon Web Services • Cloud Hosting Services United States Microsoft Azure • Cloud provider Office 365 • Collaboration Five9 • Contact Center