Lending decisions must be explainable and every action accountable. Bennox is built that way: AI does the reading and drafting, rules make the decisions, and everything is recorded.
AI governance
AI extracts, classifies and drafts. It never approves, declines or sets an outcome.
Lending decisions come from deterministic rulesets, scorecards and policy gates, so the same file always gets the same answer.
Credit memos label anything not in the application data as an assumption.
Agents can act only through actions your team has allowed, and every run is logged step by step.
Our AI providers don't use your data to train their models.
Access control
Staff sign in through Amazon Cognito, with multi-factor authentication available.
Customers sign in to the self service portal with a one-time code sent to their mobile.
Every action in the platform is gated by a named permission, and roles bundle the permissions each team needs.
Customers see only their own loans in the self service portal.
Bank account numbers are shown masked; full numbers are never sent to the screen.
Audit and accountability
Changes to core records are kept in history tables with who made them and when.
Sign-ins to the staff app and the customer portal are recorded.
Decisions, stage changes and approvals are recorded against the application or loan.
Customer emails and the replies to them are kept on the case they belong to.
Hosting and data
The platform runs on Amazon Web Services in the Sydney region.
All traffic to the platform, portals and APIs is encrypted in transit with TLS.
Documents are stored encrypted in Amazon S3.
When Open Banking is switched on, Consumer Data Right data is requested only with the customer's consent, used for the purpose it was given for, and consent can be withdrawn at any time.
Questions from your risk or security team?
We’re happy to take them through the platform in detail.
