Security & privacy

How Capture protects applicant data and keeps spam out.

Spam-resistant submissions

Every form includes invisible honeypot fields, server-side timestamp validation, and rate limiting. Bots are filtered before they reach underwriting queues.

Encrypted in transit

All data travels over HTTPS. Sensitive fields are never logged or exposed in URLs, and reference IDs are generated with unpredictable tokens.

Minimal data collection

We only ask for information required to evaluate the loan. Applicants can request deletion of their data by contacting support with their reference ID.

No account required

Status lookups use reference IDs instead of passwords, reducing credential risk while still keeping information private to the applicant.