Security

Your underwriting is nobody else's business

Valuation models are competitively sensitive. The platform is built so that your data is isolated, encrypted, and never used for anything but your work.

Authentication

Sign-in is handled by Clerk, a dedicated SOC 2-audited identity provider, including hardened session management. We never see or store your password.

Your models, isolated

Every saved model is owner-scoped at the database layer. Queries are bound to your identity — there is no cross-tenant code path to misconfigure.

Encryption

All traffic is encrypted in transit (TLS via Cloudflare). Model data rests in a managed PostgreSQL database with encryption at rest.

BYOK: your AI key stays yours

AI intake runs under your own API key. The key is stored only in your own browser — on our servers it exists in memory for a single extraction request, then it is gone. Never logged, never written to our disks, never sent anywhere but the AI provider you chose. Clear it whenever you like with Forget key.

Your documents

Uploaded documents are processed for extraction and are not retained as training data. The extraction contract is strict: only whitelisted rent-roll fields can enter your model, and only after your review.

Monitoring & continuity

The application's health endpoint is polled continuously by independent third-party monitoring, and every release reports errors to a dedicated tracking service.

Questions or disclosures

Security questions, vulnerability reports, or data-handling questions: support@outpostfi.com.