Security & trust
Built for the broker who doesn't trust AI with the deal.
Your database is your business — twenty years of relationships, promises, and private comps. Here is exactly how we treat it.
Tenant isolation, enforced by the database
Row-level security is on from day one. Your team's data is scoped at the Postgres layer itself — the application role physically cannot query across tenants, and our CI runs cross-tenant intrusion probes on every change. The AI layer queries through the same governed connection, so isolation applies to the Hound too.
Draft-and-approve, by default
Nothing client-facing ever auto-sends at default settings. Every AI-produced draft, mail batch, and data change lands in your Approvals queue. Autopilot is raised per capability, by you, and every action the Hound takes is written to an audit ledger you can read.
Deterministic math
Cap rates, GRMs, proformas, rent surveys, and commissions are computed by tested TypeScript ported from thirty years of Realhound formulas — locked by golden-master tests. A language model never produces a financial number in this product.
Provenance on every fact
Every AI-captured record stores its source — the email, the deed, the document page — and its extraction confidence. Low-confidence extractions go to review, never silently into your database.
Your data is yours
No training on tenant data. Zero-retention configuration with our AI provider where available. Export everything, anytime. Deletion honored end-to-end, embeddings included. Downgrading to Free keeps your graph intact.
Clean-room data pipeline
Radar is assembled exclusively from licensed feeds and public records — parcels, deeds, mortgages, state registries. Every contract is reviewed for use rights before a feed activates. No scraping, ever.
Modern authentication
Passwords hashed with modern KDFs, short-lived sessions with rotating refresh and instant revocation, and per-integration least-privilege API keys. SSO/SAML and SCIM ship with the Enterprise tier.
Boring, reliable infrastructure
Serverless Postgres with point-in-time recovery plus independent nightly backups to a second provider. Encrypted in transit and at rest. Compliance surfaces — CAN-SPAM identity on outbound, DNC awareness on call sheets, per-state consent prompts for call recording — are product features, not afterthoughts.
Security questionnaires and SOC 2
We maintain a security documentation pack for team and enterprise reviews — ask and it's yours. SOC 2 Type II certification is planned and gate-scheduled with our first national-brokerage agreements. Questions, or something to report: security@realhoundweb.com.