← Home

Security

Your appraisal data is sensitive. Here's how we protect it.

Encryption in transit

All connections use TLS 1.3. Data never travels unencrypted.

Encryption at rest

AES-256 encryption for all stored data, with keys managed separately from data.

Tenant isolation

Each lender's data is logically separated. You cannot access another lender's files.

Access controls

Role-based permissions. Audit logs for all data access.

Infrastructure

Sphinx runs on cloud infrastructure with:

Application security

Your data

Appraisal documents are processed to generate findings, then stored only as long as needed. You can request deletion of your data at any time. Aggregated, anonymized data used for calibration contains no identifying information about properties, borrowers, or your organization.

Reporting vulnerabilities

If you discover a security issue, please report it to us responsibly. We appreciate the help keeping Sphinx secure.

Security contact

security@sphinx.credit