Trust center

The platform is checked from outside every hour. The live numbers, every incident in the last 90 days and our support response times are on the status page, computed from those checks rather than typed in.

• Website (sourcedeck.ai)Operational · 100% over 30 days
• SourceDeck appOperational · 100% over 30 days
• Background jobs (alerts, inbox sync, CASH tasks)Operational · 100% over 30 days
• CASH assistant toolsOperational · 100% over 30 days
• CASH voice lineOperational · 100% over 30 days
• Nightly backups and restore testOperational · 10.48% over 30 days

• Application servers: the SourceDeck app, the background jobs that run CASH and your alerts, and this website run on Fly.io in its Ashburn, Virginia region (iad).
• Database: your workspace data lives in a managed Postgres 16 database on Crunchy Bridge, hosted on AWS in us-east-1 (Northern Virginia).
• Files: photos, attachments and generated documents (offering memoranda, flyers, PDFs) are stored in Cloudflare R2 and served by long, unguessable links. Anyone holding one of those links can open that file, which is what lets you send a flyer to a client. Do not upload a document you would not be comfortable sharing by link.
• Backups: stored in a separate, private Cloudflare R2 bucket that is not served to the web.

• Every SourceDeck site and the app force HTTPS. The app and sourcedeck.ai also send a two year HSTS header, so browsers refuse a plain HTTP connection.
• Connections from the app to the database require TLS.
• Credentials you connect for other services (email sending, mail, phone and similar keys) are encrypted by the application with AES-256-GCM before they are written to the database. The encryption key is kept outside the database.
• Customer sign-in is through Google, so SourceDeck holds no password for your account.

Every brokerage is its own tenant, and every table that holds brokerage data is protected by Postgres row level security, switched on and forced, so the rule applies even to the table owner. The rule is fail closed: a query that does not say which brokerage it is for gets no rows at all, rather than everyone’s. The application connects with a database role that cannot bypass row level security, so the separation is enforced by the database, not by a filter in our code.

Every table is classified (brokerage data, shared public records, or platform bookkeeping) in a register that a check on every proposed code change compares against the live database, so a new table cannot merge unclassified. A separate isolation test suite, which tries to read across brokerages on every tenant table, is run by hand against the live database.

Shared public records (parcels, MLS listings, corporate filings) are the one deliberate exception: they are public data, shared by every brokerage in a market, and never contain your contacts, deals or notes.

One person holds the platform administrator role today: the founder. That role can open a workspace to help with a support request. The start and the end of every such session are written to that workspace’s own audit log.

Support requests you send from inside the app are stored as tickets in your workspace; when CASH cannot answer one, it is escalated to the same administrator. Your own team sees what your workspace roles allow: the broker of record sees every seat, a team leader sees their team, and an agent sees their own work.

• The whole database is backed up every night at 3:15 am Eastern and copied to the private backup bucket.
• We keep the 14 most recent nightly backups, the 8 most recent Sunday backups and the 6 most recent first of the month backups.
• Every Sunday a restore test loads the latest backup into a scratch database and compares it against the live one. A backup older than 26 hours, or a restore test that failed or has not run in 8 days, pages us and shows on the status page.
• Backups and the restore test run from SourceDeck’s own operations machine, separate from the app servers.

Your contacts, deals, listings and notes are yours. A workspace owner can download all of it at any time from Settings, Export your data: one zip with a CSV and a JSON file for each of contacts (with every email and phone on file), contact notes, deals and their history, listings and dictated property notes, plus a manifest of row counts. Every download is recorded in the workspace audit log.

To have a workspace deleted, download the export, then email [email protected] from the owner address. Deleted data then ages out of the backups on the schedule above.

CASH and the writing features send the text of the task they are doing (the email being drafted, the listing being described) to Anthropic’s Claude models through SourceDeck’s business API account. SourceDeck does not train or fine tune any model on your data, and your data is never used to answer another brokerage’s questions.

By default, nothing CASH writes reaches a third party on its own: outbound email, letters, texts and calls start as drafts that wait for a person to approve them. A workspace owner can choose to let a specific agent send without asking; that choice is per workspace and can be switched back at any time.