Enterprise readiness

Built for the security questionnaire.

Enterprise lenders do not buy on demos alone — they buy on identity, isolation, auditability, recoverability and an API their own team can build on. This is how NexusMortgageOS is architected to answer those questions.

Row-level policy enforcement on every table

Target monthly uptime

99.9%

Sev-1 response target

15 min

Backup recovery point

≤ 5 min

Named support model

Dedicated CSM

Control areas

What a lender's InfoSec review actually asks about

Identity

in place

SAML 2.0 and OIDC single sign-on, SCIM 2.0 user and group provisioning, enforced MFA, session policies per role.

Access model

in place

Role-based access enforced at the database row level, not the UI — every read and write is policy-checked server side.

Encryption

in place

TLS 1.3 in transit and AES-256 at rest, with per-tenant key separation and documented key rotation procedures.

Auditability

in place

Append-only, hash-chained event ledger covering human and agent actions, exportable for examination.

Environments

in progress

Isolated sandbox tenant with synthetic data, promotion workflow, and replayable webhook history for your integration team.

Resilience

in progress

Automated backups with point-in-time recovery, documented RTO/RPO targets and a tested restore runbook.

SSO & SCIM

Provision and deprovision originators from your existing identity provider; a terminated LO loses access to every file the same minute HR closes the ticket.

Tenant isolation

Each lender's data is separated with per-tenant keys and policy-enforced boundaries, so a support query can never cross an organization line.

Sandbox first

Integration work happens against a synthetic-data sandbox with the same API contract as production, then promotes on your schedule.

Migration & support

White-glove data migration, parallel-run validation, and a named customer success manager through go-live and beyond.

Public API & webhooks

Everything the UI can do, your systems can do

signed · retried · replayable

Resource	Surface	Notes
Loans	GET /loans · POST /loans · PATCH /loans/{id}	Full lifecycle read/write with field-level permissions
Pricing	POST /pricing/scenarios · GET /pricing/ratesheet	Sub-second scenario quotes, same engine the desk uses
Documents	POST /documents · GET /documents/{id}/extraction	Upload, classify and read structured extraction results
Conditions	GET /loans/{id}/conditions · POST /conditions/{id}/clear	Programmatic condition clearing with evidence attachment
Webhooks	loan.stage_changed · condition.cleared · lock.expiring	Signed, retried with backoff, replayable for 30 days

This page describes the platform's intended architecture and operating targets for this demo workspace. It is not a certification, audit result, or contractual commitment — certifications and SLAs would be confirmed in writing during procurement.