Complete Tenant Isolation, Encryption, and Compliance

Security at Relm Pro isn't an add-on — it's the foundation. 256-bit AES encryption at rest, TLS 1.3 in transit, full tenant isolation at every layer (database, vector store, file storage, AI context), SSO/SAML support, and SOC 2 compliant data residency.

Key Capabilities

256-bit AES encryption at rest
TLS 1.3 encryption in transit
Full tenant isolation at every layer
SSO / SAML authentication
SOC 2 compliant data residency
Your data never used to train AI models

Multi-Layer Tenant Isolation

Every customer's data is isolated at every level of the stack. Database records are partitioned by organization with row-level security enforced at the database layer (Supabase PostgreSQL with RLS). Vector embeddings in Turbopuffer are namespace-separated. File storage in AWS S3 uses organization-scoped prefixes. Even AI model context is isolated — one organization's data never appears in another's chat or analysis.

Encryption & Access Control

All data is encrypted with AES-256 at rest and TLS 1.3 in transit. Authentication is handled by Clerk with support for email/password, Google SSO, Microsoft SSO, and SAML-based enterprise SSO. Role-based access control ensures team members see only what they should. JWT tokens are validated on every request via edge middleware.

Data Protection Commitments

Your property data and uploaded documents are never used to train, fine-tune, or improve any AI model. Your data is never visible to other organizations. We maintain SOC 2 Type II compliant security practices, and offer a 99.9% uptime SLA. Complete audit trails are maintained for compliance and regulatory requirements.

Related Features

See Enterprise Security in Action

Start your first property analysis and experience how Relm Pro transforms underwriting.