Frequently asked questions.
No hedging, no “it depends” without an answer underneath it.
Row-level security is enforced at the database layer, not just hidden in the interface — an agent's queries can only ever return their own rows, an owner's can only return their agency's. SSN, bank routing/account, card number, and driver's license are encrypted at rest. Reading one back requires an authorized call that's logged every time, not a plaintext column anyone with access can read.