Security

Your underwriting is nobody else's business

Valuation models are competitively sensitive. The platform is built so that your data is isolated, encrypted, and never used for anything but your work.

Authentication

Sign-in is handled by Clerk, a dedicated SOC 2-audited identity provider — including session management and MFA. We never see or store your password.

Your models, isolated

Every saved model is owner-scoped at the database layer. Queries are bound to your identity — there is no cross-tenant code path to misconfigure.

Encryption

All traffic is encrypted in transit (TLS via Cloudflare). Model data rests in a managed PostgreSQL database with encryption at rest.

BYOK: your AI key stays yours

AI intake runs under your own API key. The key is used in memory for the single extraction request and discarded — never logged, never persisted, never proxied to anyone but your chosen AI provider.

Your documents

Uploaded documents are processed for extraction and are not retained as training data. The extraction contract is strict: only whitelisted rent-roll fields can enter your model, and only after your review.

Monitoring & continuity

Independent uptime monitoring with a public status page, error tracking on every release, and managed database backups.

Questions or disclosures

Security questions, vulnerability reports, or data-handling questions: support@outpostdcf.com. Service status: status.outpostdcf.com.