2 min read
Encryption everywhere
Data moving between you and us travels over encrypted connections, so it cannot be read in transit. Data we store is encrypted at rest, so a copy of the underlying storage is useless without the keys. Encryption is the baseline of modern data protection, and we apply it across the board rather than only to the obvious fields.
Access on a need-to-know basis
Inside Credit Corp, staff can only reach the data their role requires — the same least-privilege principle we recommend for your own user roles. Access is logged, so who looked at what is recorded, and sensitive actions require verification. This limits both accidental exposure and any misuse.
Monitoring and testing
We monitor for unusual activity and maintain the operational discipline — patching, testing and review — that keeps a finance platform safe over time. We also run independent security testing so weaknesses are found and fixed before they can be exploited. Security is treated as ongoing work, not a one-time certificate.
Your part of the picture
The strongest platform still needs you to secure your own login. Use a unique password, turn on two-factor authentication, keep your user list tidy, and switch on alerts. To understand exactly what data we hold and why, see what data we hold.
Frequently asked questions
Is my data encrypted?
Yes — both in transit, as it moves between you and us over secure connections, and at rest, where it is stored. Encryption is applied across the platform, not just to selected fields.
Can Credit Corp staff see all my data?
No. Staff can only access the data their role needs, that access is logged, and sensitive actions require verification. It is the same least-privilege approach we recommend for your own users.
How do I know your security is tested?
We run independent security testing and maintain ongoing monitoring, patching and review, so issues are found and fixed proactively rather than left to chance.
Related reading

What data Credit Corp holds about your business and why
We hold only the data we need to lend responsibly and run your account: company and director details,…
Read →
Setting up an authenticator app for two-factor authentication
Two-factor authentication adds a second step to sign-in: after your password you enter a six-digit code from…
Read →
Managing user roles and permissions
Roles let you give each colleague the right level of access: some can only view, some can transact, one is…
Read →
How your data is used in lending decisions
A lending decision uses your company figures, credit reference data and, with your permission, open banking…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.