Security
Your documents stay yours.
These are the controls implemented in the product today, described plainly — not a roadmap, and not a badge.
Implemented today
Eight controls, each one built.
Private workspaces
Each brokerage's documents and facts live in their own workspace. Nothing is shared between brokerages, and no brokerage's material is used to answer another's questions.
Role-based visibility
Every read runs as the asking agent. Private, company and co-broke visibility are enforced on every fact, not applied afterwards.
Private listings stay private
A pocket listing stays with the agent who owns it until they choose otherwise.
PII redaction
Client phone numbers and email addresses pasted into a question are redacted before anything is stored.
Document shareability states
Client-safe, review before sharing, or internal only — set by a person, never guessed, and never assumed for a new file.
Internal documents withheld
Files stating commission, sales contacts or confidential terms contribute their facts but are never attached to a client message.
Fact provenance
Every fact keeps its source document, the document's issue date, the upload date and the last confirmation.
Audit trail
Every shareability decision and every manual change is logged with who, when and what changed. Nothing changes silently.
What we do not claim
We list certifications when we hold them. Today we hold none.
Brokredge has no SOC 2 report, no ISO 27001 certificate, and no third-party penetration test. Saying otherwise would be the easiest lie on a security page, and the one most worth avoiding. When any of that changes, it will be listed here with its date.
Pilot brokerages are told exactly how their material is handled before they upload anything, and the same rules apply to us as to the product: nothing changes silently.
Data handling
Plain answers to the questions a brokerage owner asks.
What we hold
Who can see it
Where answers come from
Leaving
The privacy notice covers the small amount of contact information collected by the form on this website.
Ask us the hard questions.
Bring your IT or compliance person to the demo. We would rather answer now than be discovered later.