For your vendor review
Vendor packet
What a bank or credit union's third-party risk team asks for, in one place. Ready means it exists and the link opens it. Not yet means it does not exist, and the row says what it waits on.
In one page
We hold nothing from your own systems about your customers, and we connect to none of your systems.
- What we are. The Lender Report is a free public record of who lends on what, and a seller of labeled ads and page tools for lenders, at flat monthly fees. The Lender Report is operated by JPro Labs LLC. Mailing address: 335 E Linton Blvd, Suite B14 #2074, Delray Beach, FL 33483.
- What we are not. We are not a lender, a broker for this service, a referral service or a marketer of deposits. We route no borrower to anyone and make no credit decision. A visitor can send a financing request to this site's operator, which is not sent to any lender, or a message to one lender from that lender's own Verified (paid) page. We cannot count deals, so we promise none.
- What an ad cannot do. It cannot change the order of results or a published figure. The code that orders results cannot read who has paid, and the build fails if that changes.
- What your reviewer controls. Nothing runs until your own named reviewer has signed off every line, and you can pause it at any time. Nothing is charged before both reviews are done.
- What payment cannot change. We charge lenders flat fees for verification and advertising. Those fees, and the ads and Verified (paid) listings on this site, do not change search order or published data.
- Where to write. The mailbox for everything on this page is desk@lender.report.
The documents
14 ready, 11 not yet
| Document | Status | What it is, or what it waits on |
|---|---|---|
| Security summary | Ready | Hosting, what we hold and do not hold, sign-in, logs, backups, and what is not in place. |
| Data held, and subprocessors | Ready | Cloudflare, Inc. today. Stripe, Inc. is added for payments when orders open. Cloudflare hosts and stores it. The operator keeps waitlist entries and financing requests in its own records and does not sell or share them. |
| Order form and sample insertion order | Ready | The terms of an order on one printable page, with a filled sample. |
| Sample compliance packet | Ready | The twelve parts kept for every version of an ad, as a sample. |
| How an ad is signed off, kept and taken down | Ready | Roles, the statements a reviewer signs, pause and takedown, and retention. |
| Ad specs | Ready | Limits, the lines the system adds, the checks, the banned wording, and the pages an ad never runs on. |
| Rate card | Ready | Prices by market and tier where prices are shown, the rules of the card, and which states are paused. |
| Lender plan terms | Ready | Banks may negotiate the liability section with us in writing. |
| Claim terms | Ready | What a person confirms when claiming a page. |
| Privacy policy | Ready | What is collected, what never is, who it is shared with, and how to ask for a copy or deletion. |
| Accessibility statement | Ready | What we aim for, how we test it, and what is not perfect yet. |
| Data and AI license | Ready | What may be done with the pages, the API and the MCP server. |
| How we make money | Ready | Flat fees for verification and advertising, and what they cannot change. |
| Method and sources | Ready | How results are ordered and where every figure comes from, with dates. |
| SOC 2 report | Not yet | No SOC 2 report yet. We will not imply one exists. |
| Certificate of insurance | Not yet | Media liability, technology errors and omissions, and cyber cover are not in place. They wait on the owner. |
| W-9 | Not yet | Not supplied yet. It waits on the owner. |
| Formation record and officer of the operating company | Not yet | Not supplied yet. The operator's name and address are above and on the Terms and Contact pages. |
| OFAC screening statement | Not yet | Not written yet. |
| Financial history | Not yet | This service is new and has no financial history of its own. Statements for the operating company are not published. |
| Completed security questionnaire | Not yet | Not completed yet. We will answer yours in our own format and mark what is not yet in place. |
| Incident response plan and notice period | Not yet | Not written yet. No number of hours has been set for telling you of an incident. |
| Backup and recovery procedure | Not yet | Not written yet. Cloudflare's own point-in-time restore is described on the security page. We have not rehearsed a restore. |
| Written staff access policy | Not yet | Not written yet. |
| References from peer institutions | Not yet | None yet. We have no peer institution to name. |
Use your browser's print command to save this page as a PDF for your file. We will keep this list current: a row changes from Not yet to Ready only when the document exists and can be opened.
Contract terms, in plain words
The order form and the lender plan terms are the contract
- Fees. Flat and set in advance. No fee depends on leads, clicks, calls, closings or loan size, and the order form says so. An SBA lender may not pass the fee to an applicant, and no fee is tied to an SBA loan.
- Cancelling. Monthly orders cancel at any time and run to the end of the paid month. Annual orders end at the term and renew only if you tick the box, after we write 60 days before.
- Price changes. A change to the list price needs 30 days' notice and reaches new orders only. An order keeps its price for its term.
- Approval before payment. A market is held for 14 days and counts against the 3 places in it. It is charged only after your reviewer and ours have both cleared the ad.
- Liability and law. Our liability is capped at the fees paid in the prior 12 months, and you answer for the content of your ads. The governing law is in the lender plan terms. A bank may ask to negotiate that section, and we will do it in writing.
- Paying. Card for small orders, bank debit, or an invoice on net 30 terms after the order form is accepted. The bank details for an invoice come from the invoice itself.
Ask for what is not here
Write to desk@lender.report with your institution's name and what your review needs. If it is on the not yet list, we will say so, and we will tell you what it waits on.