Security & Trust
Built so your business data stays your business.
RealestateCopilot pairs live market intelligence with your agency's private knowledge. That only works if you can trust where your data goes. Here is exactly how we handle it, no marketing.
Hosted in Australia
Your data lives on servers in Sydney, with encrypted backups to a second secure Australian system we control.
Encrypted
Everything is encrypted in transit (HTTPS/TLS). Uploaded knowledge-base documents are also encrypted at rest with AES-256-GCM before they touch our database.
Isolated
Every organisation's data is partitioned. A query can only ever retrieve your own organisation's documents, never another customer's. Collections marked internal only are processed entirely on our own servers and are never sent to any external AI service.
Never used for training
Our AI providers do not train their models on data sent through their business APIs. Your documents are not used to improve anyone's model.
How your knowledge base works
Documents you upload to your private knowledge base (appraisal templates, past sales, playbooks, policies) are split into passages, encrypted, and stored so Phil can retrieve the most relevant ones when you ask a question.
When Phil uses your material to answer, it cites the source document so you can trust and verify every claim. Your knowledge base is only available to your organisation, and only on plans that include it (Investor Pro and corporate tiers).
Market search runs separately, against public property data, your private documents are never sent to the market-search provider.
Our commitments
- ✓Your data is yours. We don't sell it, and we don't share it between customers.
- ✓Deletion on request. Remove a document and its passages are deleted. Close your account and your organisation's data is removed.
- ✓Access control. Documents are tied to your organisation; sensitive account actions are logged.
- ✓Australian owned and operated, built for Australian property and privacy expectations (aligned to the Australian Privacy Principles).
- ✓Honest guidance. Phil provides general guidance, not financial, legal, or tax advice. We tell you when to verify with a professional.
For agencies evaluating us
We're a focused team and we'd rather be straight with you than over-claim. We follow SOC 2-aligned practices (encryption, least-privilege access, and logging of sensitive account actions) and are happy to walk your principal or IT contact through our setup, complete a security questionnaire, and discuss data-residency options as we roll out corporate tiers.
Have a specific requirement, SSO, a signed DPA, on-shore hosting? Talk to us and we'll tell you honestly where we're at.
This page describes current practices for the RealestateCopilot platform and is provided for transparency; it is not a contract. Specific contractual terms are set out in your agreement with us. Last updated 25 June 2026.