Skip to content
Stafflo.ai
Buy an audit
Stafflo.ai
Financial services

LSP Evidence Locker

Collects proof that each lending partner follows the rules, as it happens, and shows which partner is missing what before the audit asks.

The partners

Every lending partner's evidence, counted against your own obligation list

LSP Evidence Locker on a wide screen: a dark sidebar with Partners, Obligation matrix, Open items (2), Evidence (1), Obligation list, Audit packs and Audit log; the top bar names the fictional NBFC, Godavari Demo Finance Limited, with a Synthetic data badge and the signed-in compliance analyst, Harini Muppala. The Partners page says its figures are counted under obligation list version 2 of 2 April 2026, with period tabs for the last 12 months, July to September, September and October to date. Four figures: required evidence present 99.6% (3,736 of 3,751 items, all partners), 8 partners, 1 open gap and 1 file changed after receipt, originals preserved. Below, a table of the lending service providers, each with what it does for the lender, obligations with all their evidence, required evidence present as a percentage and a count, the last evidence received and open gaps; Deccan Demo Lending Services (LoanMitra Demo) shows 1 open gap and Hussainsagar Demo Collections 1 file changed.The real screen, on synthetic data
One month's grievance log never came: an open gap, counted as missing

Demo built on synthetic data.

1 of 5: The partners

The problem

Under RBI's Digital Lending Directions, the lender answers for what its lending service providers do. The evidence — consent records, key fact statements delivered, complaint response times, recovery call audits — sits with each partner, in each partner's format, until someone asks for it.

What it does

Each partner's own wayAPI feedKwikRupee DemoFile dropPaySetu DemoConsent recordsGrievance logSeptember 2026Fingerprint 9f3c…Received 2 Oct, 6:14 am

It receives evidence from each partner through an API or a file drop and fingerprints every file, so tampering shows.

Grievance logp2PaySetu DemoSep 2026GRV-DEMO-0912GRV-DEMO-0917GRV-DEMO-0924GRV-DEMO-0931Evidence itemObligation list v3ObligationGrievance timelinesPeriodSeptember 2026PartnerPaySetu DemoSourceGrievance log p2

It reads partner documents into evidence items against a list of obligations you can edit.

Coverage, JuneObligation list v3Partner1234567PresentKwikRupee Demo6 of 6PaySetu Demo6 of 6LoanMitra Demo6 of 7SaralRin Demo6 of 6TurantRupee Demo6 of 6Evidence presentMissingLoanMitra Demo: no grievance log

It shows each partner's coverage — which obligations have evidence behind them and which don't.

Export audit packPaySetu DemoAudit packJul to Sep 2026ManifestFile and fingerprintConsent records9f3c…KFS delivered41aa…Grievance logc07e…Call audits5d21…Checks offline

It exports an audit pack per partner.

Try to break it

On the call we'll trigger these, live:

  • A partner's feed stops for a week. The gap is flagged on day two.
  • A file changes after it was received. Its fingerprint no longer matches, and it's flagged.
  • The same file arrives twice. It's stored once.
KwikRupee DemoDaily feed, October12131415161718192021FlaggedGap flagged on 16 OctoberThe second day with no evidence, not the seventhExpected every day, from this feed's settings

Where it runs

Your data centre or an India-hosted cloud account. Read the documents with a local model and partner data stays with you.

Who else does something like this

Finnulate offers compliance tooling for RBI's digital lending rules.

The Locker is self-hosted by the lender and organised around evidence from each partner.

The rules it respects

Built around RBI's Digital Lending Directions 2025 and the DPDP Act.

What our tests measured

How we test

These figures come from test runs on Google's Gemini (gemini-3.5-flash-lite), a hosted model, on synthetic data. We'll add runs on a local model.

Seeded gaps flagged100%
Feed gaps flagged by day two100%
Files changed after receipt that were flagged100%
Fields a document doesn't state, left empty100%
Fields read correctly from partner documents98.96%
Second copies stored when a file arrived twice0
Periods counted as present with no evidence behind them0
Model cost per partner document$0.000191
  • Run on 15 October 2026
  • Model: gemini:gemini-3.5-flash-lite
  • 230 examples
For your engineers
Engines
Reconciler, Extractor, Consent Spine, Proof Console
Sealed mode
Test passed: with sealed mode on, it refuses every outbound connection except to the model you've approved.

Data flow

Lending partners (synthetic)Partner APIsa daily batchDrop foldersPDF and CSV filesFingerprintSHA-256 on receiptOriginals storeappend-only, re-checkedReconciler enginea repeat stored onceReadingcode, or the ExtractorObligation listversioned, editableAudit packoriginals, SHA256SUMSCoverage and gapsin code, by due timeScreenspartners, matrix, gapsAnalystresolves, exportsaudit_log
Ask about the Evidence LockerStart with a pilot