How we protect the deals you trust us with
A transaction portal holds people's homes, contracts and dates. Here's how we keep that safe, and what we refuse to hold at all.
The safeguards in the product
Every connection uses TLS, and the database and files are encrypted at rest with AES-256.
Agents, lenders and clients see only the deals they own or were invited to. Commission is visible only to the agent on that side.
Documents sit in private storage and open only through links that expire after five minutes.
Every account has a verified email. Agents' and brokers' licenses are checked before their portal opens. Sign-ins are rate-limited and known-breached passwords are refused.
Public keys can't read any table, and row-level security on every table is a second lock.
Sign-ins, document uploads, status changes and access changes are logged with who and when.
A managing broker sees only what each agent chooses to share, and the agent can change it or withdraw it at any time.
Every code change is type-checked, tested and scanned for vulnerable dependencies before it ships.
No loan applications, bank statements or wire instructions
Loan applications, bank statements, pay stubs, tax returns, credit reports and wire instructions with account numbers are refused at upload and in forwarded email. Nobody can override that, our staff included. Pre-approvals, Loan Estimates and Closing Disclosures are shown as a summary, with a link to the lender's own copy.
For lenders' vendor reviews
We have a written information security policy, covering responsibility, access, encryption, our service providers, incident response and retention, and we'll share it and answer your security questionnaire. Ask us at the address below.
Security contact and vulnerability reports: elitehomeportal@gmail.com · security.txt