How does Hughes access our data?
Hughes reads your data in your own Snowflake account — it never leaves your cloud. For anything that changes a system, Hughes drafts the correction and the audit trail; your team commits it. The full picture is on the
Security page.
Does Hughes write to our core?
No. Hughes holds no write keys. It drafts the correction and the audit; your team commits it in e-OSCAR and your core, so the bureaus and the core stay in sync. You stay the furnisher of record.
Where does our data live, and who can see it?
In your own account — Hughes runs against it and never copies it out. Access is least-privilege and scoped per workflow, and every query is logged. We'll walk your information-security team through the data flows before any real data is connected.
Are you SOC 2 certified?
SOC 2 Type II and ISO 27001 are on our roadmap, and Hughes is built to align with FFIEC and NCUA examination expectations and GLBA safeguards. We'll share our current controls and timeline with your vendor-risk team under NDA.