Trust Center

Welcome to Ottri's Trust Center. Ottri is an embedded financing platform. Merchants in home improvement and elective medical use Ottri to offer financing to their customers, and Ottri routes each application to licensed third-party lenders. Ottri is not a lender and does not make credit decisions or fund loans.

Our written information security program is built around the GLBA Safeguards Rule and led by our Chief Administrative Officer. It requires encryption in transit and at rest, multi-factor authentication on every personnel account, least-privilege access with quarterly reviews of critical systems, and peer-reviewed code changes with automated security checks. The platform runs on AWS and MongoDB Atlas, and Drata monitors our cloud setup continuously.

Medical practices that use Ottri enter the patient's contact details and select the procedure being financed when they send a financing application link. Ottri handles that information as the practice's business associate under HIPAA. It stays in our platform and is shared only with the lenders that consider the application.

We are preparing for a SOC 2 Type 2 audit covering the Security criteria. Request access below to view our policies and security documents.