Trust
Enterprise architecture, built around evidence.
Credit infrastructure is only as good as what it can prove about its inputs. Pledged is designed so that every figure can be traced, every source carries its trust level, and nothing upgrades that level by itself.
Read-only by design
Connect is designed for least-privilege, read-only access. It never writes to a borrower’s systems.
Originals preserved
Every file is kept exactly as received and hashed, with row-level lineage to every figure it affects.
Explicit permissions
Borrowers authorize each source and can revoke it. Lenders see only the facilities they are entitled to.
Tenant isolation
Each lender’s and each borrower’s data is kept separate by design. Nothing is shared across lenders by default.
Versioned governance
Policies, mappings and runs are versioned and approved by named people. Credit rules execute deterministically; no model makes a credit determination.
Data protocol first
Before the first real file, a Data Handling Protocol agreed in writing sets purpose, access, storage, retention and deletion.
The Data Handling Protocol
Raw rows stay put
Under the protocol, borrower records stay in the Pledged environment. No raw rows are sent to an outside model or service.
One purpose
Your data is used for the work you scoped and nothing else.
A deletion date
Retention is agreed before the first file. Deletion is confirmed to you in writing.
Named access
Only the people named in the protocol can open your files. Storage and encryption are set out in the same document.