Security & data protection
We design every workflow with privacy and compliance at the core.
Pragmatic Mortgage Lending uses strict row-level security (RLS), audited access controls, and encryption to keep borrower information private. We never expose borrower or broker data outside authorized roles.
Key safeguards
- Row-level security on every Supabase table and storage bucket.
- Server-only service-role keys and strict separation of client/server permissions.
- Audit-ready logs for document uploads, consent capture, and broker activity.
- PDF-only document storage with managed retention policies.
Reporting a vulnerability
If you believe you have found a security issue, email security@pragmatic.mortgage. We investigate quickly and coordinate disclosure responsibly.