1. Who we are
Audit AI is a CMBS underwriting automation platform operated by Odin AI Labs for licensed offshore underwriting teams working commercial-mortgage-backed-securities deals on behalf of US bank counterparties. Each tenant operates an isolated workspace.
2. Data we process
- Analyst account data — name, email, role, sign-in events.
- Deal source documents — Offering Memoranda, finance memos, rent rolls, operating statements, budgets uploaded by analysts. Treated as confidential bank deal information under the originating bank’s NDA.
- Diagnostic data — IP, user-agent, device fingerprint at the moment of each state-changing action (audit-event scope only).
3. Local-only AI processing
All AI inference (PDF parsing, field extraction, classification) runs on hardware controlled by Odin AI Labs. The platform does not transmit deal data to OpenAI, Anthropic, Google Document AI, AWS Textract, or any other third-party LLM/OCR API. This constraint is enforced in code: no external API key fields exist in the runtime configuration.
4. Multi-tenant isolation
Each adjusting team operates a separate Organization. Postgres row-level security keys every domain-table read/write to the acting org. Deal data from one tenant is not visible to any other tenant under any access path.
5. Chain of custody
Every state change — deal creation, field override, ModelDraft generation, QC approval, document download — writes a tamper-evident audit-event row scoped to the actor and the affected resource. Audit events are retained for the life of the workspace.
6. Retention
Deal data is retained per the bank counterparty’s record-retention requirements (typically 7–10 years post loan maturity). A workspace Admin may archive or anonymize individual deals at any time.
7. Contact
Privacy enquiries should go to your workspace Admin. For platform-level questions, contact Odin AI Labs through the channel established during pilot onboarding.