Security
Security posture
Last updated: September 8, 2026. Draft pending counsel.
BGScreen processes consumer identifying information for FCRA customers. This page is a summary for technical reviewers. A questionnaire response is available from security@limelyte.com. We do not claim SOC 2 on this page.
Isolation
Each customer’s applicant files, orders, and reports are isolated from other customers. Tenant identity comes from the request, not from a field the caller can set.
Encryption
Social Security numbers and dates of birth are encrypted. Production will not start without encryption keys.
Transaction log
Every vendor call is written once when it finishes and is not edited later. That log is also the billing record.
Authentication
People sign in with a session. Software signs in with a short-lived access token. API clients do not hold bureau passwords. Access and permissible purpose are checked on every request.
Contact
security@limelyte.com
Limelyte Technology Group, Inc.