For mortgage brokers and lenders
Loan documents and borrower data, without the email trail
Collect pay stubs, bank statements, and tax returns, gather application details that come back complete, and answer borrower questions in encrypted chats. Everything is end-to-end encrypted, and it’s erased when you’re done with it.
Clients never need an account. Firm features are on the Business plan.
A loan file is an identity thief’s dream
Social Security numbers, W-2s, tax returns, bank statements, and account numbers. Sent by email, they sit in inboxes on both ends for years and get forwarded around. Squawk Secret gives borrowers a safer way to send what you need, and gives you a record of who opened what and when.
Squawk Drop
One secure place for borrower documents
Give borrowers a page with your company’s name in the address to send pay stubs, statements, and returns, up to 2 GB per submission. Sort them with topics like Income, Assets, or Property.
Intake
Application details that come back complete
Collect borrower information with required fields and checks for Social Security numbers, EINs, and bank routing and account numbers, plus a typed signature with a signature record.
Fillable PDFs
Your forms, completed and signed
Send the official W-9, or upload your own fillable PDFs, such as authorizations. Borrowers fill in the real form in their browser and you receive the completed PDF.
Secure chats
Conditions and questions, without the email chain
Work through conditions with borrowers in an end-to-end encrypted chat: messages, masked credentials, and files. Add a processor as a co-host.
Send
Payoff and account details, delivered safely
Send account and payment details as one-time links that self-destruct after they’re read, protected by a passphrase you give by phone.
Oversight
Controls that support your security program
Require two-step verification for everyone, or sign in with Microsoft 365, Google Workspace, or Okta. Admin and member roles, your logo on client pages, and an audit trail you can export.
Protecting borrower data
The FTC Safeguards Rule (16 CFR Part 314) applies to non-bank financial institutions, including mortgage brokers and lenders. It requires a written information security program, encryption of customer information in transit and at rest, and multi-factor authentication for people who access it.
Squawk Secret can be one part of how you meet those expectations: what you send and receive is encrypted in the browser and stored only in encrypted form, your team can be required to use two-step verification, and the audit trail records every view and response. Our Security page and Trust center support your review of us as a service provider. This page isn’t legal advice.
Records and retention
Squawk Secret erases what you send and receive on a schedule you set, which keeps sensitive information from piling up where it doesn’t belong. Documents that belong in the loan file should be downloaded into your loan origination or document management system before they expire. Squawk Drop items can be kept for up to a year, and the audit trail of who opened what, and when, is kept for your records.
Everything in one place
One Business account covers your whole team: loan officers, processors, and underwriters, each with their own sign-in.
- End-to-end encryption: we can’t read the contents
- Squawk Drop page for borrower documents, up to 2 GB at a time
- Application forms with format checks and typed signatures
- Official W-9 and your own forms as fillable PDFs
- Secure chats with co-hosts
- Passphrases and email-locked links
- Required two-step verification and single sign-on
- Audit trail with CSV export
- Your company’s name and logo on client pages