AI is moving into credit decisions faster than the assurance around it. The question serious lenders ask is not whether a model is clever. It is whether anyone can show what it did, on what evidence, and who signed off.
That is the bar we hold ourselves to. Every figure Kita produces traces back to the document and the page it came from. Every step is logged. The decision stays with the lender’s credit team. ISO/IEC 27001 puts an accredited auditor behind the part of that covering how we handle, protect, and account for the information itself.
What the certificate covers
Certificate ISMS-KI-071526, issued on 15 July 2026 and valid to 15 July 2029 by Advantage Partners, the trading name of Montlake Partner Group LLC, an IAS-accredited certification body. The certified scope is Kita Capture, the Kita AI Credit Officer, the Kita AI Underwriter, the Kita Portal, and the Kita API, with the assets and processes supporting them. Surveillance audits run every year, and we use Vanta to keep the evidence current between them.
What it does not cover
ISO 27001 certifies a management system, not a product and not a model output. No certificate can tell you an extraction is correct. That is what the citation on every figure, the audit log, and your own credit team are for.
SOC 2 Type II is a separate engagement, still in progress. We will keep saying so until the report is issued.
Verify it
The control set and supporting documentation are published at trust.kita.ai. The certificate and the SOC 2 engagement letter come on request from support@kita.ai. It can also be checked in IAF CertSearch under Montlake Partner Group LLC, independently of anything we publish.