Security and trust

Built to be checked

The math is verifiable and your documents stay yours.

Deterministic core

Financial results are computed by tested code in exact decimal, not by a language model. The same inputs always produce the same result, and every figure can be traced to its formula.

AI proposes, the engine computes

AI reads the documents you provide and researches the property's location. It never computes your results. Every proposal carries its source and confidence, and you review or override it.

Workspace isolation

Your deals and documents belong to your workspace. Access is enforced by role, and separation between workspaces is enforced on the server.

Role-based access

Members, administrators, and owners see and do only what their role allows. Sensitive actions are gated server-side.

Encryption in transit and at rest

Traffic is served over HTTPS. Documents are stored in object storage with encryption at rest provided by the storage layer.

Data you can delete

Delete a deal or your workspace and the underlying documents are removed from storage. Deletion is a real operation with a record.

What we do not claim

We will not overstate our posture. Altyst does not currently hold a SOC 2, ISO 27001, or similar third-party certification, and this page makes no such claim. As the company matures we will pursue formal attestations and update this page with real, verifiable status. Nothing here should be read as a guarantee of accuracy, returns, or regulatory approval, and Altyst is not investment, legal, tax, appraisal, or brokerage advice.

How your documents are handled

You upload documents to underwrite a specific deal. They are stored to your workspace, read to extract the figures you review, and used to build your model. They are not sold, and they are not used to train third-party models. You can delete a document, a deal, or your entire workspace, which removes the underlying files from storage. Deletion and retention are governed by our data retention policy.

AI providers and subprocessors

Reading a document or researching a property's location uses a large-language-model provider. Only the content needed for that request is sent, and only when you ask Altyst to run it. The current list of subprocessors is maintained alongside our policies, and our data processing agreement is published with them. If you have a specific data-handling requirement, contact us and we will walk through it.

Operational controls

Backups run on a schedule so your work can be recovered. Access to production is limited and logged. If something goes wrong, our aim is to tell you plainly and fix it, not to paper over it.

Documents for your security review

Have a security or privacy question? Write to support@altyst.ai.

Numbers you can defend

A model you can audit to the source, and data you control.

Start underwriting See how it works