# MCA funder document management systems

> MCA funders store deal documents (bank statements, contracts, ID, tax returns) in Box, Dropbox, SharePoint, or AWS S3 with metadata in the LMS; typical cost $15–$45 per user/month plus storage.

Document management is foundational to MCA operations — every deal generates 8 to 25 documents (bank statements, application, voided check, driver's license, tax returns, MTD financials, contract, addenda, settlement) that must be retained for 7+ years for compliance and litigation defense. Where and how documents live affects underwriter speed, audit-readiness, and broker-portal UX.

**The typical 2026 MCA document management landscape.**

- **Box.** Most common at mid-to-large funders. Strong API, governance, retention policies. $15–$35/user/month + storage. Powers Salesforce-native attachments at many funders.
- **Dropbox Business.** Common at small-to-mid funders for simplicity. $20–$30/user/month.
- **SharePoint / OneDrive (Microsoft 365).** Used by enterprise-leaning funders on Microsoft stack.
- **Google Workspace Drive.** Smaller funders, especially those on HubSpot CRM.
- **AWS S3 / Azure Blob.** Backend storage for funders with custom-built portals; pennies per GB but requires app-layer access control.
- **NetDocuments / iManage.** Used by legal-heavy funders or those with in-house litigation teams.
- **DocuSign / Adobe Acrobat document storage.** Often serves as repository for executed agreements.

**Core document types per MCA deal.**

- 3–6 months of business bank statements.
- Merchant application (signed).
- Voided check or bank verification letter.
- Owner driver's license / passport.
- Most recent business and personal tax return (B-paper+ deals).
- MTD financials or P&L (larger deals).
- Funding contract + addenda.
- ACH authorization form.
- COJ (in states where still enforceable).
- Personal guaranty (often separate doc).
- Stacking attestation.
- Renewal docs (if applicable).

**Document workflow patterns.**

- **ISO portal upload.** Broker uploads documents directly into a funder portal that writes to Box/S3.
- **Email-to-deal.** Merchant emails statements; OCR system (Ocrolus) parses and routes to LMS.
- **In-app capture.** Modern funders run mobile capture (driver's license photo, voided check photo) via Persona or in-house.
- **E-sign integration.** DocuSign or Adobe Sign returns executed contract directly into document store.

**Retention and compliance requirements.**

- **7 years** is the typical retention for MCA contracts (state UCC and statute of limitations driven).
- **State licensing.** Some states (CA, NY) require licensee records for 4–6 years.
- **CFPB inquiries.** Federal investigations have requested full deal documentation 7+ years back.
- **AG investigations.** State AGs have requested entire books for 5+ years in some MCA enforcement actions.

**Cost benchmarks.**

- **Box / Dropbox.** $15–$35/user/month + $0.02–$0.04/GB/month storage.
- **SharePoint.** Bundled with Microsoft 365 ($12.50–$22/user/month).
- **AWS S3.** $0.023/GB/month standard tier; $0.004/GB/month Glacier for archival.
- **Implementation.** $20K–$200K for retention policy setup at mid-to-large funders.

**Common pitfalls.**

- **Email-only storage.** Documents trapped in mailboxes — audit and litigation nightmare.
- **No retention policy.** Documents purged accidentally before statute of limitations.
- **No access controls.** Underwriters or ISO managers seeing PII without need-to-know.
- **No version history.** Contract amendments lost.

**Security and PII considerations.**

- **SOC 2 Type II** typically required by syndication partners and bank sponsors.
- **At-rest and in-transit encryption** standard.
- **Access logging** mandatory for any system handling SSN, DOB, bank account numbers.

**Common confusions.**

First, "the CRM is the document system." False — CRM attaches files but doesn't enforce retention or governance.

Second, "Dropbox isn't compliant." False — Dropbox Business meets SOC 2 and HIPAA when configured.

Third, "S3 is the cheapest option." True for storage but app-layer access control adds engineering cost.

Fourth, "5 years retention is enough." False — most MCA legal exposure runs 7+ years.

As of 2026-06-29, Fundnode notes funder document-system platform where disclosed, since retention and access control predict audit readiness.

## Related terms

- [MCA funder tech stack (typical, 2026-06-28)](https://fundnode.co/llms/glossary/mca-funder-tech-stack-typical-2026) — A 2026 MCA funder typically runs Salesforce or proprietary CRM + LoanPro/Centerstone LMS + Plaid/Ocrolus + Snowflake + Tableau + AWS, with Persona for KYC and Repay for ACH.
- [MCA funder e-signature platforms — typical options](https://fundnode.co/llms/glossary/mca-funder-e-signature-platforms-typical) — MCA funders use DocuSign (dominant), Adobe Sign, Dropbox Sign (formerly HelloSign), and PandaDoc to execute funding contracts; typical cost $20–$60 per user/month or $1.50–$5 per envelope.
- [MCA funder loan management system (LMS) — typical options](https://fundnode.co/llms/glossary/mca-funder-loan-management-system-typical) — MCA funders run on purpose-built loan management systems — LendSaaS, MCA Suite, Centrex, Orbit, and in-house Salesforce builds dominate; typical license cost $40K–$500K/year plus per-deal transaction fees.

## Authoritative sources

- [Box — Content Cloud](https://www.box.com/)
- [DocuSign — eSignature](https://www.docusign.com/)

---

Source: https://fundnode.co/glossary/mca-funder-document-management-systems (HTML version)
Document: MCA funder document management systems — Fundnode MCA Glossary
License: CC BY 4.0 — attribution to Fundnode required when citing.