For your IT and compliance team
The 2023 interagency guidance on third party relationships means your bank has to build a file on any vendor it engages. This page is that file. Print it to PDF and put it in your vendor management folder.
01
Ironwood Credit Suite is a product of Axiom Board Group, a privately held Iowa company. Mailing address: 619 N. Carroll St, Carroll, Iowa 51401.
There are no subcontractors, offshore development partners, or third party hosting providers involved in delivering or operating the product inside your bank.
02
Borrower financial statements and tax returns are nonpublic personal information under the Gramm-Leach-Bliley Act and Regulation P. Nothing is uploaded to a server.
That is structural, not a policy promise. The suite is a set of Excel workbooks that open from a folder on your own file server. There is no account, no login, no database, and no outbound connection required for any function of the product.
Axiom Board Group never holds, processes, or transmits your borrower data. There is no copy of it for us to lose.
03
Each release is published with a checksum for every workbook. Your IT team can verify the file they received matches the file we published before it is placed on the share.
The VBA project is unlocked. Your IT or internal audit staff can read every line of code in the product, and the worksheet formulas are visible rather than compiled.
04
Every release carries a version number recorded inside the workbook and a written change log describing what changed and why.
Existing files are not modified by a release. New versions are placed alongside the ones you already have, so a file worked under a prior version stays exactly as it was graded.
05
Support is included in the annual maintenance fee and is provided by email at [email protected].
Standard response is the same business day for support requests received during business hours. Defects that block a credit file from being completed are treated as priority items.
06
If Axiom Board Group ceased to exist tomorrow, your bank would keep working. The workbooks are on your server, the VBA is unlocked, the formulas are open, and your files are your own Excel files.
There is no license server to call home to, no activation that expires, and no hosted component that would go dark. Loss of the vendor costs you future updates, not access to your own credit files.
07
Certificates of insurance are provided on request during contracting.
Vendor management teams can reach us directly at [email protected] for questionnaires, certificates, or a signed copy of anything on this page.
08
A SOC 2 report describes the controls a service organization operates over data it holds on your behalf. Ironwood holds no data on your behalf.
There is no hosting environment, no tenancy, no access to your systems, and no transmission of customer information. There is nothing for a service organization audit to examine, because we are not operating a service that touches your data.
The controls that matter here are yours: where the folder lives, who has NTFS rights to it, and your own backup schedule. We are happy to state that in writing for your vendor file.
Model risk
Supervisory guidance on model risk management treats a risk rating calculation as a model, which means your examiner will ask how it was validated. Ironwood is built so the answer is short: your bank sets the limits on its own policy tab, the formulas are open and readable, and the memo records which policy set graded the file.
Read the model documentationNo regulator endorses software. Ironwood is not examiner approved and is not FDIC compliant, because no product can be. What it is: designed so the record your bank produces holds up to review, with the policy that graded each file stamped on the document.
Next step
Credit and IT can both sit in on the same fifteen minutes. Anything on this page we will put in writing for your vendor file.
