1. Where It All Started
DoxAI was founded in 2022 after Alfonso identified a pattern shared by lenders and industry peers: critical processes like document collection, extraction, and categorisation were being handled manually, often with data being sent overseas for processing. This created risks around data sovereignty, security, and accuracy.
The vision was to build something that kept that intelligence onshore, encrypted, standardised, and automated — a modular platform where lenders and brokers could select only the pieces they needed, assembled in a “Lego-style” format.Episode Links
▶️ WATCH THE FULL PODCAST HERE: https://youtu.be/SgOijUkNxGY
🎧 LISTEN ON SPOTIFY: https://open.spotify.com/episode/5OOYT9KY92jmqNVwuXPmVC?si=x1DWQPIJRoms7OCTgxK-Mg
🌐 EXPLORE DOXAI: https://doxai.co/
2. What DoxAI Actually Does
The platform now covers the full lending origination lifecycle. When a document enters the system, it goes through a layered, automated process:
- Categorisation & Classification: The system reads each document, identifies its type (e.g. pay slip, bank statement, driver's licence), and splits mixed PDFs automatically.
- Contextual Extraction: Relevant data fields are pulled based on what the lender actually needs — not a generic scrape.
- Fraud Checking: The system checks if documents were AI-generated, verifies IDs against the federal DVS (Document Verification Service), and analyses metadata, structure, and content integrity.
- Automated Submission: Extracted data is packaged and pushed to lender systems via API, with optional PII redaction before handover.
- Loan Management & CRM: Storage, loan lifecycle tracking, and broker-facing CRM tools round out the suite.
3. The Problem with Most AI in Lending Today
Alfonso discusses his concerns around Generative AI tools — even well-known ones — are prediction models, not deterministic ones. They are designed to give you the answer that satisfies you, not necessarily the correct one. Hallucination is real, and the risk of uploading sensitive client financial data into a general-purpose chat tool is significant.
His recommendation: use tools that are purpose-built for the task, with full control over where data goes, how models behave, and the ability to audit responses. Brokers should never paste client information into a generic AI chat box.
4. Agentic AI — And Why Governance Matters
DoxAI's latest product direction is a fully autonomous workflow model. Rather than keeping humans in the loop at every step (the conventional approach), DoxAI's agents handle the full process autonomously — and only escalate to a human when they identify an issue they cannot resolve.
To govern this responsibly, DoxAI introduced a concept called KYA — Know Your Agent. Every agent is assigned pre-authenticated action rights. It can only operate within its defined environment, and cannot take unauthorised actions without human approval.
Each agent also logs every individual task it performs — creating a full audit trail of AI activity across the lending workflow.
5. Real-World Automation: The Cat Example
Alfonso used a memorable example to illustrate how the workflow functions in practice. A client is asked to upload a driver's licence. They accidentally upload a photo of a cat. Rather than a broker having to catch this manually, the DoxAI system:
- Scans and identifies the document as a non-compliant file
- Automatically sends the client a message asking for the correct document
- Once corrected, checks document quality, encryption status, and compliance
- Extracts only the fields the lender requires and pushes them via API
No human touchpoint required. The broker just sees a completed, verified application.
6. Data Security & Compliance Standards
All data is geolocated and stored in-country by default (e.g. Australian clients' data stays in Australia). DoxAI holds the following certifications:
- SOC 2 Type 2
- ISO 27001
- PCI DSS
- HIPAA (for health industry clients)
- GDPR (for European operations)
- Annual cybersecurity penetration testing
- Active-active infrastructure with guaranteed zero downtime
They also offer 24/7 monitoring of their systems and cyber security posture.
7. Clarity AI: Governing the AI Your Business Already Uses
Recognising a gap in the market, DoxAI released a standalone governance platform called Clarity AI. It is designed for enterprises that need to manage and audit the AI tools already operating within their business — including tools staff may be using without approval (a phenomenon Alfonso refers to as “shadow AI”).
Clarity AI provides:
- Shadow AI detection (finding unapproved tools in use across teams)
- Policy tracking and governance frameworks
- Automated risk assessment
- Internal staff training programs on AI use
- A sandpit environment for safely testing AI models before enterprise deployment — with automatic PII removal
8. Key Takeaways for Brokers and Lenders
- Automation is only as safe as the guardrails you put around it. Purpose-built tools beat general AI every time.
- The Lego approach means you don't have to replace everything — add the components you actually need.
- AI governance is not optional. If your staff are using AI tools unsupervised, you have a data risk problem.
- ROI is best measured when you redesign a whole workflow, not just replace one component.
- DoxAI serves 75 bank and non-bank lenders and approximately 7,000 brokers — primarily through the Verifast (formerly Veri.Moto) asset verification platform.
9. Practical Next Steps
- Audit your current document process: where are documents going, and who is handling them?
- Identify your fraud exposure points — what gets manually reviewed vs. automated?
- Consider a free workshop with DoxAI to reverse-engineer and redesign your workflow from scratch.
- Review which AI tools your team is currently using — and whether they meet compliance standards.
- Connect with Alfonso on LinkedIn or visit doxai.co for more information.
⚠️ Disclaimer: This content is for educational and research purposes only and does not constitute financial, legal, or business advice. Always conduct your own due diligence before implementing systems, tools, or operational changes in your business. Some links or recommendations mentioned may be affiliate partnerships, meaning we may earn a commission at no additional cost to you if you choose to engage with a product or service. All opinions remain independent and based on research and experience.
