TRUST CENTER

Security at CRE Financial OS

Effective August 29, 2026

Workspace isolation

Records are scoped to an organization and protected by Supabase Row Level Security. Private documents use non-public storage and short-lived signed links.

Application controls

• Server-verified authentication and workspace membership.
• Server-side plan and durable usage enforcement.
• Audit events for material workspace and lease actions.
• Human verification before extracted terms become active.

Infrastructure

The service uses HTTPS and managed infrastructure from Vercel and Supabase. Provider credentials remain server-side.

Current limitations

We do not claim SOC 2 or ISO 27001 certification. Formal incident response, independent penetration testing, and backup-recovery testing remain operational launch tasks.

Report an issue

Use the contact form and do not access data that is not yours.

This launch-ready draft must be reviewed with your legal counsel and updated with the operating company’s legal name, address, and jurisdiction before accepting paid subscriptions.