Security & Trust
How deal documents are handled, what infrastructure we run on, and where our security program stands today.
What you upload
Deal Analyzer accepts the documents underwriters already work with — tax bills, T12s and operating statements, rent rolls, and offering memoranda. These documents may contain property addresses, financial figures, and other deal-specific information. We treat everything you upload as confidential deal data.
How deal documents are treated
- Uploaded documents and the deal data extracted from them are associated with your account and are not shared with other users.
- Document text is sent to Anthropic (Claude) for AI-assisted field extraction. Under our commercial terms with Anthropic, this content is not used to train its models.
- Nothing an AI extracts from a document is treated as final. Every extracted value is shown to you as an editable field for review and confirmation before it feeds any calculation.
We do not sell your deal data or personal information to third parties, and we do not use your deal data to train AI or machine learning models without your explicit, separate consent. Full detail is in our Privacy Policy.
Source-backed, deterministic outputs
Tax reset estimates are not AI-generated. Parclio applies a deterministic rules engine — published county reassessment rules applied to your confirmed inputs — to produce every tax, NOI, DSCR, and debt yield figure. AI is used only to help read uploaded documents and to explain results in plain language; it never computes or overrides an underwriting number. See our Methodology page for the full breakdown.
Authentication & access controls
Sign-in is handled through Supabase Auth via Google OAuth or a passwordless email magic link — we do not store your password. Each account's data (deals, documents, extracted values, and saved scenarios) is scoped to that account and is not visible to other users.
Infrastructure
Parclio is built on established, widely-used infrastructure providers:
Application hosting and deployment
Database and authentication
Payment processing — we never see or store your card number
AI-assisted document extraction and Ask Parclio
Product analytics — autocapture and session recording are disabled
Data retention & deletion
Account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time; we process deletion requests within 30 days. Certain billing records may be retained longer as required by law. Full detail is in the Data Retention section of our Privacy Policy.
Certifications & compliance roadmap
No SOC 2 claim.
Parclio does not currently hold SOC 2 or any other third-party security certification. We complete security questionnaires and can walk your security team through our architecture directly, and we're evaluating a formal certification as the product scales with larger institutional customers.
Procurement & security questions
Evaluating Parclio for a lending team, bank, or firm-wide deployment and need to complete a security review? Contact us directly and we'll work through it.
Contact us about security →