Security at Cap Fi

Every client has an individual login. Documents, application status, offers and messages are scoped to that account, so one client cannot see another client's file.

Administrative access is limited to Cap Fi's Managing Director.

Uploaded documents such as bank statements, tax returns and identification are stored in a private, non-public storage bucket. They are never served from a public URL.

When you or an administrator open a document, the system issues a short-lived, single-purpose link that expires within minutes.

Where you authorize a credit review, the identifying information required for that request is encrypted before it is stored and is not displayed back in the portal.

The website and portal are served over HTTPS, so information you submit is encrypted between your browser and our systems.

Client accounts are created by Cap Fi rather than through open self-registration. If you no longer want your account, we can permanently delete it and the documents attached to it on request.

Use a strong, unique password for the portal and do not share your login. Cap Fi will never ask for your portal password by phone, text or email.

Upload documents through the portal rather than email whenever possible.