Isolated per account
Your data lives in a managed cloud database with row-level security, so each account can only read its own records.
Security
Your client liststays yours.
You’re trusting us with names, addresses and loan details. Here’s exactly how we protect them, in plain English, with no badges we haven’t earned.
How your data is protected
Encrypted in transit (TLS)On
Encrypted at restOn
Row-level account isolationOn
Sign-out after 30 min idleOn
Private report linksOn
How we protect data
The safeguards behind every account.
Encrypted in transit and at rest
All traffic uses HTTPS (TLS). Stored data is encrypted at rest by our hosting providers.
Strong passwords
Passwords are handled by our authentication provider, never stored by us in plain text, and must be at least 12 characters.
Short sessions
You’re signed out automatically after 30 minutes without activity.
Sign out everywhere
Signing out revokes your sessions on every device, not just the one in front of you.
Private report links
Each homeowner’s report opens from a private link meant only for them. Reports aren’t listed or searchable.
For teams
Controls your IT team will ask about.
Team accounts add the access controls a lender needs: sign-in through your identity provider, a record of who did what, and admin control over who can see and change each part of the account.
When a loan officer leaves, an admin removes their access and reassigns their clients, without a support ticket.
- Single sign-on (SSO) for team accounts
- Audit logs of user and admin activity
- Roles and permissions set by your admins
All usersAdminsToday
DR
Dana R. signed in with SSO9:02 AM
Sign-inAR
Admin removed Kevin M.9:15 AM
Access2C
212 clients reassigned to Priya S.9:16 AM
ClientsRC
Role changed to Branch admin10:40 AM
RolesPayments
Your card number never touches our servers.
Billing runs through Paddle, a PCI-compliant merchant of record. You enter card details on Paddle’s checkout, and Paddle stores and processes them.
We see your subscription status, not your card number. That keeps a whole category of risk out of our systems.
- Checkout and card storage handled by Paddle
- No card data stored in the Homes AVM database
- Cancel anytime from your account
ActiveBilling summaryHomes AVM Pro
PlanMonthly
CheckoutPaddle
Card details held byPaddle
Card data in our databaseNone
Monthly$25.00
What we hold
Only what we need to build your reports.
We use your client list to prepare your home reports and monthly emails. Each account’s data is kept separate from every other account’s.
Homeowners who unsubscribe are excluded from future sends automatically. Questions about data handling go to privacy@homesavm.com.
Read our privacy policyWhat we keep for a clientUsed to build their reportSave clientVisible only to your account
FAQ
Questions, answered.
Still curious? Talk to us or book a demo.
Are you SOC 2 certified?
No. We don’t currently hold a SOC 2 report or any other formal security certification. This page describes the controls we actually run, and we’ll update it if that changes.
Can another Homes AVM customer see my clients?
No. Row-level security in our database restricts every account to its own records.
Who on your team can see my data?
Because we organize your import and review your monthly sends, our team works with your client list to deliver the service. That’s the reason we access it.
Do you support SSO?
Yes, for team accounts. Individual loan officers sign in with email and password. Book a demo to talk through your identity provider.
Can I fill out our vendor security questionnaire?
Yes. Send it to support@homesavm.com and we’ll answer based on how Homes AVM actually works.
Have a security question? Ask us directly.
Bring your IT or security team to a demo. You’ll get straight answers, including about what we don’t hold.