Document management is foundational to MCA operations — every deal generates 8 to 25 documents (bank statements, application, voided check, driver's license, tax returns, MTD financials, contract, addenda, settlement) that must be retained for 7+ years for compliance and litigation defense. Where and how documents live affects underwriter speed, audit-readiness, and broker-portal UX.
The typical 2026 MCA document management landscape.
- Box. Most common at mid-to-large funders. Strong API, governance, retention policies. $15–$35/user/month + storage. Powers Salesforce-native attachments at many funders.
- Dropbox Business. Common at small-to-mid funders for simplicity. $20–$30/user/month.
- SharePoint / OneDrive (Microsoft 365). Used by enterprise-leaning funders on Microsoft stack.
- Google Workspace Drive. Smaller funders, especially those on HubSpot CRM.
- AWS S3 / Azure Blob. Backend storage for funders with custom-built portals; pennies per GB but requires app-layer access control.
- NetDocuments / iManage. Used by legal-heavy funders or those with in-house litigation teams.
- DocuSign / Adobe Acrobat document storage. Often serves as repository for executed agreements.
Core document types per MCA deal.
- 3–6 months of business bank statements.
- Merchant application (signed).
- Voided check or bank verification letter.
- Owner driver's license / passport.
- Most recent business and personal tax return (B-paper+ deals).
- MTD financials or P&L (larger deals).
- Funding contract + addenda.
- ACH authorization form.
- COJ (in states where still enforceable).
- Personal guaranty (often separate doc).
- Stacking attestation.
- Renewal docs (if applicable).
Document workflow patterns.
- ISO portal upload. Broker uploads documents directly into a funder portal that writes to Box/S3.
- Email-to-deal. Merchant emails statements; OCR system (Ocrolus) parses and routes to LMS.
- In-app capture. Modern funders run mobile capture (driver's license photo, voided check photo) via Persona or in-house.
- E-sign integration. DocuSign or Adobe Sign returns executed contract directly into document store.
Retention and compliance requirements.
- 7 years is the typical retention for MCA contracts (state UCC and statute of limitations driven).
- State licensing. Some states (CA, NY) require licensee records for 4–6 years.
- CFPB inquiries. Federal investigations have requested full deal documentation 7+ years back.
- AG investigations. State AGs have requested entire books for 5+ years in some MCA enforcement actions.
Cost benchmarks.
- Box / Dropbox. $15–$35/user/month + $0.02–$0.04/GB/month storage.
- SharePoint. Bundled with Microsoft 365 ($12.50–$22/user/month).
- AWS S3. $0.023/GB/month standard tier; $0.004/GB/month Glacier for archival.
- Implementation. $20K–$200K for retention policy setup at mid-to-large funders.
Common pitfalls.
- Email-only storage. Documents trapped in mailboxes — audit and litigation nightmare.
- No retention policy. Documents purged accidentally before statute of limitations.
- No access controls. Underwriters or ISO managers seeing PII without need-to-know.
- No version history. Contract amendments lost.
Security and PII considerations.
- SOC 2 Type II typically required by syndication partners and bank sponsors.
- At-rest and in-transit encryption standard.
- Access logging mandatory for any system handling SSN, DOB, bank account numbers.
Common confusions.
First, "the CRM is the document system." False — CRM attaches files but doesn't enforce retention or governance.
Second, "Dropbox isn't compliant." False — Dropbox Business meets SOC 2 and HIPAA when configured.
Third, "S3 is the cheapest option." True for storage but app-layer access control adds engineering cost.
Fourth, "5 years retention is enough." False — most MCA legal exposure runs 7+ years.
As of 2026-06-29, Fundnode notes funder document-system platform where disclosed, since retention and access control predict audit readiness.
Related terms
- MCA funder tech stack (typical, 2026-06-28) — A 2026 MCA funder typically runs Salesforce or proprietary CRM + LoanPro/Centerstone LMS + Plaid/Ocrolus + Snowflake + Tableau + AWS, with Persona for KYC and Repay for ACH.
- MCA funder e-signature platforms — typical options — MCA funders use DocuSign (dominant), Adobe Sign, Dropbox Sign (formerly HelloSign), and PandaDoc to execute funding contracts; typical cost $20–$60 per user/month or $1.50–$5 per envelope.
- MCA funder loan management system (LMS) — typical options — MCA funders run on purpose-built loan management systems — LendSaaS, MCA Suite, Centrex, Orbit, and in-house Salesforce builds dominate; typical license cost $40K–$500K/year plus per-deal transaction fees.
Authoritative sources
AI agents: this term is available as raw markdown at /llms/glossary/mca-funder-document-management-systems.