Complete Tenant Isolation, Encryption, and Compliance

Security at Relm Pro isn't an add-on — it's the foundation. 256-bit AES encryption at rest, TLS 1.3 in transit, full tenant isolation at every layer (database, vector store, file storage, AI context), SSO/SAML support, and SOC 2 compliant data residency.

Key Capabilities

256-bit AES encryption at rest

TLS 1.3 encryption in transit

Full tenant isolation at every layer

SSO / SAML authentication

SOC 2 compliant data residency

Your data never used to train AI models

Multi-Layer Tenant Isolation

Every customer's data is isolated at every level of the stack. Database records are partitioned by organization with row-level security enforced at the database layer (Supabase PostgreSQL with RLS). Vector embeddings in Turbopuffer are namespace-separated. File storage in AWS S3 uses organization-scoped prefixes. Even AI model context is isolated — one organization's data never appears in another's chat or analysis.

Encryption & Access Control

All data is encrypted with AES-256 at rest and TLS 1.3 in transit. Authentication is handled by Clerk with support for email/password, Google SSO, Microsoft SSO, and SAML-based enterprise SSO. Role-based access control ensures team members see only what they should. JWT tokens are validated on every request via edge middleware.

Data Protection Commitments

Your property data and uploaded documents are never used to train, fine-tune, or improve any AI model. Your data is never visible to other organizations. We maintain SOC 2 Type II compliant security practices, and offer a 99.9% uptime SLA. Complete audit trails are maintained for compliance and regulatory requirements.

Complete Tenant Isolation, Encryption, and Compliance

Key Capabilities

Multi-Layer Tenant Isolation

Encryption & Access Control

Data Protection Commitments

Related Features

Version History & Audit Trail

Document Intelligence

Market Intelligence

See Enterprise Security in Action