Safeguards

RealtySlip describes the controls in the product. This page is not a promise that a team or a transaction meets any legal or regulatory standard.

• Passwords are hashed. Reset links expire and work once. Replies do not reveal whether an email is registered.
• Sign-in uses an HttpOnly cookie, a short inactivity timeout, and a second step.
• Each team's records are separated, including database row policies.
• Notice emails omit the substance of a form. Web addresses do not carry client answers.
• A team chooses how long forms are kept: 3, 5, 7, or 10 years, or none.

Security questions go through the contact form. Do not include client names or property addresses.