Security & Backup Statement

This Security & Backup Statement describes the practices Brokerage Got Back follows to protect brokerage and client data on the platform, including listing and transaction records, uploaded documents, and financial and identifying information such as Form W-9s used in commission processing. This statement is a plain-language summary for brokerages evaluating the platform and is not a substitute for a formal security policy or compliance certification.

DRAFT — For attorney/security-professional review before use. Not a substitute for a formal security audit or compliance certification.

Encryption

• Data is encrypted in transit between a user's browser and Brokerage Got Back's servers using industry-standard TLS.
• Data is encrypted at rest in the underlying database and file storage systems.

Access Controls

• Access to brokerage data is restricted by the role-based permission system described throughout this platform's specification (TC, Compliance, Salesperson, Broker Admin, Vendor, Buyer/Seller, and Platform Admin roles), so each user only sees what their role and brokerage allow.
• Platform Admin (Brokerage Got Back staff) access used for support or onboarding is limited to what is needed to assist a brokerage, and private staging content is never visible to a brokerage until published.
• Passwords and account credentials are never stored in plain text.

Backups

• Brokerage data is backed up on a regular automated schedule.
• Backups are retained for a defined rolling period to allow recovery from accidental deletion or data corruption.
• Backup and recovery procedures are tested periodically to confirm data can actually be restored, not just copied.

Incident Response

• In the event of a suspected security incident, Brokerage Got Back will investigate promptly and take reasonable steps to contain and remediate the issue.
• Affected brokerages will be notified without undue delay if an incident is found to have affected their data, consistent with applicable law.

Data Segregation

Each brokerage's data is logically separated within the platform's multi-tenant architecture. A brokerage's users, by default, can only access that brokerage's own listings, transactions, and records.

Compliance Roadmap

Brokerage Got Back does not currently hold a SOC 2 or similar third-party security certification. As the platform grows, pursuing a formal certification such as SOC 2 Type II is a planned future goal, particularly as larger brokerages and franchises begin to require it as part of their own vendor risk review.

Questions

Brokerages with specific security or data-handling questions as part of their own vendor evaluation process are welcome to contact us at security@brokeragegotback.com.