This release is about control and clarity. LendAPI v3.2.8 lets you build the exact roles your team needs — deciding who can see and do what, down to the individual action — adds a single-page bird's-eye view of any product, and keeps sensitive data genuinely protected. On the servicing side, EmbARC v1.1.4 brings collateral management into the platform, with valuations, lifecycle tracking, and automated LTV monitoring, plus more flexible borrower payment controls.
Build the roles your team actually needs
New feature: Custom roles with module-level access control
Until now, everyone on your team had to fit into one of our predefined roles. That's rarely how a real lending operation works. Now you can create your own roles and set exactly what each one can see and do.
Every area of the platform — applications, Product Studio, settings, templates, and the rest — can be set to None, View, or Edit for each role you create, and permissions go deeper than modules: down to individual tabs in the agent dashboard and specific actions within an application. New roles start with no access at all, so you grant precisely what's needed instead of remembering to take things away.
It's built to be safe to run day to day. Clone an existing role to make a variant instead of starting from scratch. Delete a role and you're prompted to reassign anyone who holds it, so no one loses access by accident. The platform won't let you remove or downgrade your last administrator — you can't lock yourself out. And your roles stay in sync between production and sandbox, so permissions never drift apart.
For any lender that has to answer "who can touch what, and prove it," this is a foundational upgrade.
See your whole product on one page
New feature: Product Bird's-Eye View
Understanding a product used to mean opening each step in turn and holding the whole flow in your head. Product Studio now includes a bird's-eye view — one read-only page that lays out a product's entire application flow at a glance.
For every step you see its name and position, the decision logic that runs there and where each outcome leads, the form widgets collecting information, which data and verification providers are configured and whether they're active, and any emails that fire. Better still, it catches problems before your applicants do — flagging a step or outcome that leads nowhere, an email set to send when nothing in the flow collects an email address, or a provider missing information it needs to run. You can switch between your working draft and any published version, and see at a glance whether the draft has unpublished changes. It turns "what does this product actually do?" into a thirty-second read — and a real pre-launch audit.
Improvement: Field masking on the application detail page
Fields you've marked as masked in Product Studio are now masked on the application detail page too. And revealing a value is a deliberate, separate action — the underlying data isn't sent to the browser until someone explicitly asks for it, so it's genuinely protected rather than just visually covered up. Sensitive information stays sensitive, right where your agents work.
Improvement: Contract regeneration on revert
When an application is sent back a step and a contract is generated again, the new contract is saved as a new version rather than replacing what came before. Your complete contract history stays intact — which matters when you need to show exactly what was presented, and when. We also cleared up a range of issues across contract generation, PDF contracts, e-signature previews, and document replacement.
EmbARC v1.1.4 — The Servicing Side
Manage collateral where you service the loan
New feature: Centralized collateral management and valuation visibility
EmbARC now brings collateral management right into the loan account. Teams can track collateral assets and pledges, current and historical valuations, asset images, configurable collateral fields, and lifecycle events like release, disposal, custody, and revaluation — all in one place. Collateral summaries, including active-item counts, current value, and LTV, appear directly in loan views, so servicing teams get the full picture without hunting across systems.
New feature: Automated valuation monitoring
For eligible graded-card collateral, EmbARC now integrates with the Collectors API to refresh valuation estimates on a configurable schedule, with full request-level audit history. Your team gets more current valuation data to support collateral review and LTV monitoring — and it's designed to be safe: the refresh updates the raw estimate without automatically overwriting manually reviewed values or making any lending decisions.
More flexible borrower payments
Improvement: Pause/resume autopay and scheduled payment dates
Servicing teams can now pause and resume autopay on a payment instrument when a borrower needs a temporary change — no need to tear down and rebuild the setup. And in the Borrower Portal, the Make Payment flow now supports choosing a scheduled payment date, so borrowers can decide when a payment is processed. Rounding it out: mid-loan repayment frequency changes and automatic payment-resumption reminders after deferrals or temporary changes.
Everything else in this release
Plenty more shipped alongside the headline features.
On the LendAPI side (v3.2.8):
Bulk-import lists into user-input variables — paste in a list of codes instead of adding them one at a time.
Reliable email one-time passcodes — OTP emails now use a proper default template, and resending a code works consistently.
Stronger messaging security — additional hardening on text-message delivery.
Embeds work in Incognito — applications embedded on your site now work correctly in Chrome's Incognito mode, where browser privacy rules previously caused problems.
Cleaner dashboards — filters reset properly when switching between accounts, a higher document-upload size limit, and Product Studio is faster with fewer unnecessary background requests.
On the EmbARC side (v1.1.4):
Richer APIs — loan-details responses now include collateral value, and the loan-creation API includes daily payout, Line of Credit data, and stored application data for more complete downstream records.
More reliable operations — batch manager and worker services were separated for steadier background processing, and scheduled Baselayer callbacks were improved for recurring updates.
Security — SQL-injection hardening.
A round of fixes across business-customer onboarding from the Borrower Portal, loan product validation, payment status displays, reporting, and password reset.
About LendAPI
LendAPI is the core infrastructure for embedded finance, known as one of the fastest-growing embedded finance infrastructure companies in the world. Since its inception in 2024, the platform has provided market leadership in indirect financing across industries ranging from automotive and marine equipment to luxury consumer goods and services. Our technology enables a variety of indirect lending scenarios, delivering millions of financing opportunities for banks, credit unions, retailers, and fintechs. LendAPI provides a complete, private-labeled solution, from customer experience and administrative tools (including in-store co-pilots) to loan servicing, compliance, and licensing support, to launch in-house BNPL products quickly and efficiently.
