Security & data protection

We design every workflow with privacy and compliance at the core.

Pragmatic Mortgage uses strict row-level security (RLS), audited access controls, and encryption to keep borrower information private. We never expose borrower or broker data outside authorized roles.

Key safeguards

Row-level security on every Supabase table and storage bucket.
Server-only service-role keys and strict separation of client/server permissions.
Audit-ready logs for document uploads, consent capture, and broker activity.
PDF-only document storage with managed retention policies.

Reporting a vulnerability

If you believe you have found a security issue, email [email protected]. We investigate quickly and coordinate disclosure responsibly.