For each role
One deal record, four different jobs to do
Access isn't a setting someone can loosen. It's derived from the role a person holds on that specific deal, checked on every read and every write.
Try it
Switch the lens on the same deal
Watch sections lock and disappear as the role changes. What a role can't see isn't hidden with CSS — it never leaves the server in the first place.
Same deal record — switch the lens
1247 Maple CourtUnder contract
7 of 7 sections visible- Can editAgent timelineRatified → Inspection → Walkthrough → Closing
- View onlyLender timelineApplication → Underwriting → CD → Clear to Close
- Can editDocument vaultContracts, inspections, invoices
- View onlyFunds needed at closingClosing costs, seller credits, gift letters
- Can editClient-facing notesUpdates written for the client
- Can editInternal notesAgent ↔ lender coordination
- Can editPrivate vendor notesHow that inspector actually performed
Everything on this deal is in reach for this role.
Sign in as AgentIn detail
What each role gets
Client
Buyer, seller, or renter
- One deal at a time — a buyer here and a seller there never share data
- Both professional timelines, side by side, read-only
- Documents, invoices, and notes filtered to what was shared with them
- A personal action-item list they can check off themselves
- Renters get maintenance requests; sellers get offer comparison
Agent / Realtor
Owns deals, or collaborates free
- Every deal in one dashboard — owned (paid) or invited-in (free)
- Buyer-side and listing-side deals get different milestone templates
- Edits their own timeline; the lender's is visible but locked
- Per-deal vendor directory, with private performance notes only they see
- Logs and decides on offers; the seller sees the same comparison, view-only
Lender / Loan officer
Loan status across every deal
- Editable loan timeline; the agent's side visible but locked
- CD date drives a computed TRID 3-business-day floor, not a typed date
- Funds-needed figures are lender-edit-only — agent and client view-only
- Uploads lender-side documents through the same tier check as everyone
- Invites an agent onto a deal they own; that agent rides free on it
Broker / Admin
Oversight across deals
- Team overview across deals, plus a timestamped audit trail
- CSV export of every status change and document upload
- Provisioned directly in the database — never a self-serve signup
Next: what the vault will and won't hold
Role access decides who sees a document. A separate rule decides whether the file may exist here at all.