ScoreBoostPro

Compliance & Trust

Built for the most regulated data in the business.

ScoreBoost Pro is the software platform credit-repair agencies run their business on. Credit reports and Social Security Numbers are among the most regulated data in the United States — so security and compliance aren't a page we bolted on, they're how the platform is built.

Last updated July 14, 2026

This page explains how the platform works and summarizes consumer rights for educational purposes. It is not legal advice. Each agency is responsible for its own compliance and should consult its own attorney.

Our role

A software platform — not a credit-repair organization.

Under the Credit Repair Organizations Act (CROA, 15 U.S.C. §1679), a credit-repair organization is a business that performs credit-repair services for consumers in exchange for payment. ScoreBoost Pro does not do that. We provide multi-tenant, white-label software to businesses. The agencies and coaches who license the platform are the credit-repair organizations — they own the client relationship, set their own pricing, and carry the CROA and state-law responsibility for their clients.

  • We do not contract with, bill, or perform credit-repair services for consumers.
  • We do not guarantee any credit score increase or that any item will be removed.
  • Score-projection charts in the product are simulated planning estimates, not promises of a result.
  • Dispute letters are routed to the agency (and, where the agency requires it, the consumer) for review and approval before sending.

Security

How we protect sensitive data.

The platform processes credit-report data and Social Security Numbers. We maintain administrative, technical, and physical safeguards designed to protect that data, consistent with our obligations under the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule. No system is perfectly secure, and we do not claim absolute security — but the architecture is built defensively from the database up.

  • Database-level tenant isolation: row-level security is enforced in the database itself, so one agency should not be able to reach another's data — the boundary is enforced structurally, not merely hidden by the UI.
  • Encryption in transit for data moving between your browser, our servers, and our providers.
  • Least-privilege access controls and activity logging.
  • A written information-security program consistent with our GLBA-related obligations.
  • Data is retained only as long as needed to provide the service or as required by law, then deleted or de-identified.

Data ownership

Your clients' data stays yours.

For the consumer data an agency uploads, the agency is the data controller — it decides how that data is used and is responsible for obtaining the necessary consents. ScoreBoost Pro acts as the processor: we handle that data only to run the software on the agency's instructions, as set out in our Data Processing Addendum. We do not sell or rent personal information.

  • Agencies own their client relationships and their client data.
  • We process consumer data only to provide the service, never to sell it.
  • A Data Processing Addendum (DPA) is available on request — larger agencies typically ask for one before signing.
  • If a consumer contacts us directly about their data, we refer them to their agency and assist the agency as processor.

For agencies

Tooling built to help agencies stay compliant.

The legal responsibility for CROA, FCRA, GLBA, the Telemarketing Sales Rule, and state credit-services laws (including any registration and bonding rules) rests with each agency. To make compliance easier, the platform ships white-label templates — such as a CROA-oriented service agreement, required consumer disclosures, and cancellation notices — as a convenience. These templates are provided "as is," are not legal advice, and must be reviewed by the agency's own counsel.

  • No advance fees: CROA (§1679b(b)) bars charging for credit-repair services before they are fully performed. The platform's billing tools are built to support lawful, after-the-work billing models.
  • No guaranteed outcomes: agencies agree not to promise a specific score increase or removal.
  • Templates carry the required disclosures and the conspicuous 3-day right-to-cancel notice — for the agency's attorney to finalize.
  • Our Terms of Service put the CROA / FCRA / GLBA / state-law obligations squarely on the agency, where they belong.

Messaging

Consent-first messaging. No robocalls.

ScoreBoost Pro does not run outbound telemarketing, robocalls, or unsolicited phone-sales campaigns. Agencies can send email and SMS to their own clients through the platform — from the agency's own verified domain and its own dedicated messaging sub-account — and are responsible for obtaining consent and honoring opt-outs in line with the Telemarketing Sales Rule and the TCPA.

  • SMS is sent from each agency's own dedicated messaging sub-account, email from the agency's own verified domain.
  • Opt-out handling is built into broadcast tooling; agencies must honor unsubscribe and STOP requests.
  • The platform is for an agency to communicate with its own clients — not for cold outreach to purchased lists.

Consumer education

Know your rights under the FCRA.

The Fair Credit Reporting Act (FCRA) gives every consumer rights they can exercise for free, directly with the credit bureaus. Our educational materials help consumers understand them.

  • You have the right to dispute information you believe is inaccurate, incomplete, or unverifiable.
  • Credit bureaus generally have 30 days to investigate a dispute.
  • You can request the bureau's Method of Verification — how it confirmed a disputed item.
  • You can dispute items yourself, for free, without paying anyone. A credit-repair organization cannot do anything for you that you cannot do yourself.

Transparency

Who helps us run the platform.

We use a small set of vetted, U.S.-based service providers ("sub-processors") to operate the platform. We remain responsible for their performance and impose data-protection terms on them. They support the following functions:

  • Cloud hosting, database & authentication
  • Payment processing
  • Email & SMS delivery
  • Background job processing
  • Error monitoring & reliability

Processing takes place in the United States. A current list naming our specific sub-processors is available on request — typically to agencies under a Data Processing Addendum.

Questions about compliance or security?

Whether you're an agency doing diligence, a coach vetting the platform, or a consumer with a question about your data — reach out and a human will answer.

Book a demo →

Prefer email? hello@scoreboost.pro