Data protection
- All documents are transmitted over TLS-encrypted connections and stored in encrypted, access-controlled private storage.
- Every file is tied to your account — contractors can only see their own documents; access for Synergy staff is limited to authorized reviewers.
- Download links for staff review are short-lived (expire within minutes) and every view is recorded.
- Passwords must pass a breached-password check (Have I Been Pwned) and minimum strength requirements.
Handling of sensitive information (PII)
- Social Security numbers and driver's license numbers are never collected through this portal. Per the Client Financing Intake Protocol, they are obtained only through Synergy's approved secure process directly with the borrower.
- Collection of personal information is limited to what is needed for underwriting: identity, income, property, and existing-lien data.
- Access, uploads, approvals, and status changes are written to a tamper-evident audit log consistent with GLBA Safeguards Rule expectations.
Underwriting standards
- Contractor onboarding requires company information, contractor license(s), general liability insurance, and bond information before referral privileges are activated.
- Commercial PACE work additionally requires the CPACE Contractor Registration Application and executed financing documents before funding.
- Borrower files are reviewed against documented criteria: property value, existing liens, income, and project scope.
- No underwriting decision is made on incomplete documentation; staff may reject uploads with notes for correction.
Your responsibilities
- Keep your credentials confidential and sign out on shared devices.
- Upload only documents you are authorized to share, and only for legitimate financing purposes.
- Ensure your client has agreed to be contacted by Synergy before submitting a referral.
- Report any suspected unauthorized access to Synergy Lenders immediately.
Questions about these guidelines? Contact your Synergy Lenders account representative. These guidelines supplement — and do not replace — the executed contractor agreement and Disclosure & Acknowledgement.