Security and documents

Every participant verified, every step visible

How we verify companies and deals, who sees your data and what to prepare before registering.

Company verification

All borrowers and lenders pass KYC. An administrator reviews the whole package and states the reason for any rejection.

Automatic application screening

The system checks every application: amount, term, purpose and prohibited words. An operator manually reviews only suspicious ones — a company's first application and large amounts — and handles lender reports.

Offer review

The system checks a lender's terms against the application and the market. If the rate differs noticeably from the market, an operator reviews the offer first. The terms are never changed.

Deal confirmation

A deal becomes “Closed” only once the signed contract is uploaded and both sides are verified.

KYC documents

What to prepare before registering

All documents are uploaded as PDF, up to 4 MB each. Any file can be replaced until the package is submitted.

Russia

Borrower (Russian company)

  • Company charter
  • State register (EGRUL) extract
  • Director's passport
  • Beneficial owners (UBO)
  • Director's authority document
International

Lender (international company)

  • Certificate of Incorporation
  • Memorandum and Articles
  • Register of directors and shareholders
  • Beneficial owners (UBO)
  • Tax residency certificate
  • Proof of source of funds (statements or letter)
Data access

Who sees what

DataYour companyThe other partyOther participantsPlatform staff
KYC documents Yes No No Yes
Application: amount, currency, term, purpose Yes Yes Verified lenders only, after an automatic check Yes
Borrower's name Yes Yes Verified lenders Yes
Lender's offer Yes Borrower — after an automatic check No Yes
Deal chat and files Yes Accepted lender only No Yes
Contract Yes Accepted lender only No Yes
Timelines

How long the platform takes to respond

48 hKYC document review
24 hmanual application review, if a rule fires
24 hmanual offer review, if a rule fires

Timelines run from submission. Once exceeded, the task is flagged as overdue for staff.

Data protection

How protection works

  • Passwords are stored only as bcrypt hashes. Staff never see them.
  • The session lives in a protected cookie inaccessible to page scripts and expires automatically.
  • Forms are protected against cross-site request forgery (a CSRF token in every form).
  • Sign in is locked for 15 minutes after five wrong passwords in a row.
  • Files are served only to those with access to the deal or KYC package. There are no public links.
  • The history of every action is kept: who published, showed, accepted or confirmed, and when.

The platform is an MVP for the SBER HACK hackathon and is not a financial institution. See the privacy policy and terms of use.

Documents ready?

Registration takes a couple of minutes, verification up to 48 hours.