Your lending information belongs to your business. Flolend gives you precise control over who can work with it, from each member of staff to borrowers, brokers and the AI agents you connect.
Who can see what?
You choose each person’s access. Try it.
Example only. Nothing is saved.
01 / Your team
Flolend has six staff roles, from Tenant Admin to Lending Manager, Lending Officer, Finance, Staff and Operations, with more than 50 individual permissions underneath them. Start from a role, then switch individual permissions on or off for each person: who can edit or close loans, record payments, run PPSR actions, change settings or connect AI tools.
Admins manage this in Settings, alongside staff invites, password resets and dashboard access. Staff invites expire after seven days.
Permissions · role defaults with your overrides
Loans
Payments
PPSR
Other
Try the switches. Example only, nothing is saved.
02 / AI agents
An AI agent connects through a sign-in and consent step, for one organisation at a time, and then acts as the person who connected it. It never gets more access than that person: every request needs both the agent’s capability and the person’s own permission. Start with a narrow task and expand when you are ready.
Some steps are never handed to an agent. Closing a loan, committing a drawdown, sending loan offers, discharging PPSR and confirming variations stay with your staff. Paid PPSR actions and payment reversals need a quote first, then a one-time confirmation from your team.
Every action an agent takes is recorded: who it acted for, which tool it used, what it touched and whether it succeeded. Disconnect an agent at any time, or switch AI connections off for the whole organisation.
| Time | Acting for | Tool | Outcome |
|---|---|---|---|
| 09:12 | Mia Lane via Claude | Evaluate credit rulesACME Example Limited | Done |
| 09:14 | Mia Lane via Claude | Prepare loan communicationReply to broker | Done |
| 09:20 | Mia Lane via Claude | Close loanTidemark Rentals Limited | Staff only |
| 09:31 | Ari Ngata via ChatGPT | Read loans in arrearsArrears list | Done |
03 / History
Loan activity records who made each change and when, with the old and new values side by side. Status changes, ledger corrections, PPSR transactions, Xero syncs and portal activity each keep their own history, readable only by your staff.
04 / Portals
Borrowers see their own loans and the conditions shared with them. Brokers see the deals they are linked to once their authority is confirmed, and cannot change applications, client details or loan terms.
Borrower sees
Funding for ACME Example LimitedSigned loan agreementTo DoInsurance certificateAwaiting ReviewPhoto ID for each directorCompletedBroker sees
ACME Example LimitedAuthority confirmed$500,000 · 15 yearsWaiting on 3 conditionsConditionsRead only05 / Your data
Your lending data belongs to you. Full self-service account export is available at any time, so you can take a copy when you need it. You stay in control of your information.
Want to see what is included? We can walk you through the export during your demo, alongside everyday statement and document downloads.
06 / Security
Flolend runs on Supabase, a managed Postgres platform hosted on Amazon Web Services. Supabase is SOC 2 Type 2 compliant and ISO 27001 certified, and works with industry experts on regular penetration testing.
Your data is encrypted at rest with AES-256 and in transit over TLS. The database is backed up daily, and the platform sits behind Cloudflare protection against denial-of-service attacks.
On top of that platform, Flolend separates every lender’s data at the database level, keeps integration credentials out of the browser, and blocks AI agents from credentials and sign-in records.
Questions
No. Credit decisions, loan offers, drawdowns and closing a loan stay with your staff. An agent can gather information, check deals against your rules, and prepare drafts and routine updates within the permissions you allow.
No. It acts as that person, inside one organisation, and every request is checked against their permissions as well as the agent’s capabilities.
Disconnect it at any time. Admins can disconnect anyone’s agent or switch AI connections off for the whole organisation, and the change applies from the agent’s next request.
No. Portal accounts are kept apart from staff data by the database itself. They see only the loans, deals and conditions shared with them.
Yes. Your lending data belongs to you, and you can take a copy whenever you need it. We’ll show you what the export includes during your demo.
Yes. Flolend’s database is backed up daily on Supabase’s managed platform, and your data is encrypted at rest and in transit.
Bring your data, access and integration questions to the demo. We’ll talk through the current product and the information you need to assess it.
