Trust Center
How RealEstAi protects the files that Alberta law firms and their clients entrust to it. These pages describe the controls in the product and the practices behind it, in plain language.
Hosted in Canada
The application, its database and every document run in Microsoft Azure, Canada Central.
Encrypted, three layers
Secure connections on the way, encryption on disk at rest, and application-level encryption of identity numbers, dates of birth and stored credentials.
A sign-in code
Password plus a one-time code by email, enforced for administrators and available to every team member at the firm’s choice.
One gate on every request
Every request to a file is checked against the person, their firm and their role. Another firm’s file answers “not found”.
Every action written down
Sign-ins, downloads, trust-ledger changes and deletions are recorded with who, when and from where, and firm administrators can see the log.
Delete means archive
A deleted matter is held for ten years from the day the file was opened. Nobody can destroy it early.
AI on business terms
Documents are read by our AI providers under business terms: not used to train their models, deleted by the provider within 30 days.
Privacy duties, supported
A personal-information report in one search, a breach register that is never edited away, and a published register of every provider.
Our controls are mapped, control by control, to the CIS Controls v8.1 (Implementation Group 1), the NIST Cybersecurity Framework 2.0 and the Cloud Security Alliance Cloud Controls Matrix v4.1, and are designed to support a firm’s duties under Alberta’s Personal Information Protection Actand the Law Society of Alberta’s rules. The full control mapping and the completed workbooks are available to customers and prospective customers on request.
If you believe you have found a weakness in the platform, write to contactus@realestai.ca. We acknowledge every report, work with the reporter to confirm and fix the issue, and do not take action against anyone who reports in good faith. Privacy questions go to privacy@realestai.ca.
Trust Center pages are effective 28 September 2026 and are reviewed after any material change to the platform.