Security and privacy

Your home record should belong to you.

The product is designed around controlled access, clear exports, and grounded answers—not hidden data use.

🔒

Private by default

Records are visible only to the owner and people the owner intentionally invites.

Portable data

Users should be able to export structured records and documents without being trapped in the product.

Grounded answers

AI responses should point back to the relevant record, document, date, or source whenever possible.

Human verification

Extracted model numbers, dates, and important facts remain reviewable before being trusted.

Production security checklist

HTTPS everywhere, secure cookies, modern authentication, and multi-factor support.
Encryption in transit and at rest through the chosen database and object storage providers.
Least-privilege access, audit logs, rate limiting, input validation, and malware scanning for uploads.
Explicit consent and redaction controls before records are shared with contractors, buyers, or family.
No claim that the current static prototype provides production-grade cloud security. It stores demo data only in the current browser.