Security

We Never Train
On Your Deals.

Your rent rolls, pro formas, and deal data — encrypted, isolated, and deleted the moment you say so.

SOC 2 Type II
In Progress
AES-256
Encryption at Rest
TLS 1.2+
Encryption in Transit
Zero Retention
On LLM Providers
RBAC
Access Controls
Security Architecture

Protection at Every Layer

From document upload to final delivery, every stage of the underwriting workflow is secured with institutional-grade controls.

Zero Model Training

Your deal data, rent rolls, and financial models are never used to train, fine-tune, or improve our AI models. Ever. This is contractual, not just policy.

Tenant-Level Isolation

Every customer's data lives in a completely siloed environment. Your deal intelligence is logically separated and inaccessible to any other customer.

End-to-End Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.2+. Nothing travels unprotected from upload to final deliverable.

Role-Based Access Controls

Granular permissions ensure only authorized users access specific deals, documents, and models. Zero-trust at every layer.

Customer-Controlled Retention

You decide how long your data is stored. Set custom retention policies, delete data at any time, and maintain full control.

Audit Trail & Lineage

Every extraction, model output, and assumption is traceable back to its source document. Full audit logging of all activity.

Data Lifecycle

How We Protect Your Data

Security is embedded in every stage of the Framecast underwriting workflow — not bolted on after the fact.

Document Upload

Rent rolls, financials, and lease documents are encrypted on upload via TLS 1.2+ and stored in your isolated environment.

AI Processing

Data extraction and model generation occur within encrypted, sandboxed compute. No data persists in processing layers.

Analyst Review

Human validation happens within access-controlled workspaces with full audit logging of every action taken.

Delivery

Final models, memos, and reports are delivered through encrypted channels. Source documents remain under your retention policy.

Our Commitments

Security Isn't a Feature It's the Foundation

These aren't aspirational principles — they're contractual guarantees backed by our Security Addendum.

We never sell, share, or monetize your data
We never use your inputs or outputs to train models
We never commingle customer data across accounts
We encrypt all data at rest and in transit
We support customer-initiated data deletion at any time
We conduct regular third-party security assessments
Infrastructure

Built on Trusted Infrastructure

Enterprise-grade cloud infrastructure with the same security controls used by the world's largest financial institutions.

Cloud Security

Hosted on SOC 2 and ISO 27001 certified cloud infrastructure with multi-region availability and automated failover.

Network Protection

Web application firewall, DDoS protection, intrusion detection, and continuous monitoring with 24/7 alerting.

Access Management

SSO integration, multi-factor authentication, IP allow-listing, and automated access review and deprovisioning.

Got questions? We get that

No. Framecast contractually guarantees that your data — including documents, inputs, outputs, and generated models — is never used to train, fine-tune, or improve our AI. This commitment extends to our third-party model providers.

Never. Each customer's data is stored in a logically isolated environment with strict access controls. There is zero commingling of data between customers.

You maintain full control over your data lifecycle. Upon cancellation, you can export all your data and request complete deletion. Your data is permanently removed from all systems within 30 days.

Documents are encrypted upon upload using TLS 1.2+ and stored encrypted at rest with AES-256. During AI processing, data is handled in sandboxed compute environments with no persistent storage.

Yes. We provide our Security Addendum, Data Processing Agreement, architecture overview, and compliance certifications. Contact our team to initiate a review.

Ready to See Framecast in a Secure Environment?

Request a demo and we'll walk through our security architecture and how we protect institutional deal data.