Security & Compliance
MCube works with highly sensitive transaction materials, borrower information, financial models, property-level data, loan documentation, and other confidential client work products. Protecting this information is fundamental to our operations.
Our security program is built on industry recognized best practices and is designed to safeguard client data through comprehensive administrative, technical, and physical controls. MCube is SOC-compliant, demonstrating our commitment to maintaining a secure, reliable, and well governed operating environment.
Data Security Framework
Controlled Access & Information Handling
MCube follows a least-privilege access model, ensuring that client information is accessible only to authorized personnel based on their roles and business responsibilities.
Our controls include:
- Access-controlled office facilities and secure infrastructure areas
- Role-based system permissions with multi-layer access controls
- Continuous monitoring and audit logging of system activity
- Controls to prevent unauthorized data transfer and data leakage
- Secure handling, storage, and disposal of confidential information
All employees undergo background verification, execute confidentiality agreements, and receive regular security awareness training to ensure adherence to established information security policies and client confidentiality requirements.
Technology, Business Continuity & Resilience
MCube maintains a secure technology environment designed to protect client information against unauthorized access, cyber threats, data loss, and operational disruption.
Our security measures include:
- Enterprise-grade antivirus and anti-malware protection
- Firewalls and intrusion detection/prevention controls
- Endpoint security and restricted removable media access
- Regular data backups and secure recovery procedures
- Continuous monitoring of critical systems
- Business continuity and disaster recovery processes to support uninterrupted client service
These controls help ensure the confidentiality, integrity, and availability of information supporting our clients' critical commercial real estate transactions.
Independent Assurance & Compliance
MCube undergoes annual independent assessments of its infrastructure, security controls, operational processes, and governance practices. As a SOC-compliant organization, our control environment is independently evaluated to help provide clients with confidence in the effectiveness of our security and operational controls.
Security and compliance reports may be made available to clients upon request, subject to applicable confidentiality and non-disclosure requirements.
Where required, MCube can also obtain professional liability insurance for covered professional services, subject to the terms, conditions, and limits of the applicable policy.
Our Commitment
Security is embedded into every aspect of how MCube operates from employee onboarding and access management to technology infrastructure, client engagement, and operational governance.
We continuously invest in people, processes, and technology to protect client information and maintain the highest standards of confidentiality, integrity, and availability. Our goal is to provide institutional commercial real estate clients with the confidence that their data is managed with the security, resilience, and professionalism they expect from a trusted partner.