Security and your data

You are putting client relationships, deal economics, and executed documents into this system. Here is a straight account of how it is handled.

Tenant isolation

Every record in the platform belongs to an account, and isolation is enforced at the database layer rather than only in application code. A query runs under your identity and cannot return another account’s rows even if the application asks it to. That includes requests arriving through the assistant, the phone channels, and the Claude connector. All of them resolve your identity from a verified sign-in, never from something the request itself claims.

What the AI features can reach

• The broker assistant sees your account: contacts, deals, listings, documents, calendar, commissions. Nothing outside it.
• Buyer chat sees one listing and the documents attached to that listing. It cannot reach your document library, your other listings, your contacts, or your deals.
• The Claude connector sees what you granted it, for your account only, and is read-only unless write access was explicitly granted.

Actions with outside consequences

No AI feature sends email, texts a client, or contacts a third party on your behalf. Those are produced as drafts and proposals that require your approval. The exceptions are narrow and internal, such as creating a task or logging an interaction, and every one is recorded in an audit trail.

Buyer chat is the one place an assistant speaks to an outside party directly, within the fixed constraints described in Buyer chat.

Documents

Uploaded documents are stored encrypted and are reachable only by your account, with the single exception of documents you deliberately attach to a listing that has public buyer chat enabled. That boundary is worth internalizing: listing documents are semi-public; library documents are not.

Consent and compliance

The platform keeps a consent log for the data subjects it handles and an audit trail of compliance-relevant actions. Brokers can record license details and jurisdiction, and the platform surfaces regulatory updates relevant to where you are licensed. This is a record-keeping aid, not legal advice or a compliance guarantee.

Exporting your data

Your data is exportable. Contacts, deals, listings, and commissions can be exported to spreadsheet formats, and documents can be downloaded. This remains true after a cancellation. Cancelling a plan does not lock you out of your own records.

Deleting your data

You can request deletion of your account and its data from Settings. Deletion requests are tracked and processed, and once complete are not recoverable. Export anything you want to keep first.

Reporting a security issue

If you believe you have found a vulnerability, contact us before disclosing it publicly. Use the contact form in the site footer and mark it as a security report; we will respond and work the issue with you.