Security
Last updated: July 6, 2026
1. Our Commitment to Security
At ListDeed ("we", "us", or "our"), protecting your information is fundamental to the trust you place in us. We apply industry best practices and a defense-in-depth approach across our people, processes, and technology to keep your data — and your real estate transactions — safe. This page describes the measures we take and how you can help.
2. Data Encryption
- In transit: All traffic between your device and our Services is encrypted using TLS (HTTPS). We do not serve the application over unencrypted connections.
- At rest: Data stored in our databases and file storage is encrypted at rest using strong, industry-standard algorithms.
3. Authentication & Access Control
- Passwords are never stored in plain text — they are salted and hashed using modern, purpose-built algorithms.
- We support secure sign-in and encourage multi-factor authentication (MFA) for an added layer of protection.
- Access to your data is governed by row-level authorization, so users can only reach records they are permitted to see.
- Internally we follow the principle of least privilege — team members are granted only the access required to do their jobs.
4. Infrastructure Security
Our Services run on reputable cloud providers with robust physical and network security. We use network isolation, managed firewalls, and regular patching to reduce our attack surface, and we separate our development, staging, and production environments.
5. Application Security
- We follow a secure software development lifecycle, including code review and automated checks before changes reach production.
- Dependencies are monitored for known vulnerabilities and updated promptly.
- We validate and sanitize input to defend against common web application threats.
6. Payment Security
Payments are processed by PCI-DSS-compliant payment providers. We do not store full payment card numbers on our own systems — sensitive payment details are handled directly by our payment processors.
7. Monitoring & Incident Response
We log and monitor activity across our systems to detect and respond to suspicious behavior. In the event of a security incident that affects your personal information, we will investigate, take remedial action, and notify affected users and authorities as required by applicable law.
8. Data Backups & Retention
We maintain regular, encrypted backups to protect against data loss and retain your information only for as long as necessary to provide the Services and meet our legal obligations. For details on how we handle personal data, see our Privacy Policy.
9. Responsible Disclosure
We welcome reports from security researchers and the community. If you believe you have found a security vulnerability in our Services, please report it to us privately so we can address it before it is publicly disclosed.
- Email: security@listdeed.com
- Please include enough detail to reproduce the issue, and avoid accessing or modifying other users' data.
- We ask that you give us a reasonable amount of time to remediate before any public disclosure. We will not pursue legal action against researchers who act in good faith and in accordance with this policy.
10. Your Role in Security
- Choose a strong, unique password and never reuse it on other sites.
- Enable multi-factor authentication where available.
- Be cautious of phishing — we will never ask for your password by email or phone.
- Keep your devices and browsers up to date.
- Notify us immediately if you suspect unauthorized access to your account.
11. Changes to This Policy
We may update this Security page from time to time as our practices evolve. Material changes will be reflected by updating the "Last updated" date above.
12. Contact Us
For general security questions, contact us at:
Email: security@listdeed.com
Address: 123 Real Estate Ave, Suite 100, San Francisco, CA 94105