DealLink

Security at DealLink

DealLink handles lease, PSA, loan, and CC&R documents for commercial real estate teams, so data protection is built into the platform at the infrastructure, database, and application level — not bolted on after the fact.

Encryption

  • In transit: All traffic to and from DealLink is encrypted over TLS.

  • At rest: Your data is stored on encrypted, managed cloud infrastructure, encrypted at rest with AES-256.

Database-Level Access Control

Access control isn't just an application-layer check — it's enforced directly in the database:

  • DealLink enforces granular access policies directly in the database, so a query can only ever return the data a given user or workspace is authorized to see.

  • Administrative functions (team management, usage/token administration) are gated separately from regular user access.

Authentication

  • Sign in with Google or Microsoft (Azure AD) single sign-on, or with email and password.

  • Every request to an authenticated route is verified server-side before any data is returned.

Infrastructure

  • DealLink runs on cloud infrastructure that independently holds SOC 2 Type 2 and ISO 27001 certification.

  • Application traffic is protected by automatic DDoS mitigation at the network edge.

Document & AI Processing

  • Document conversion services delete your uploaded files immediately after conversion, with any response data deleted within 4 hours.

  • AI extraction is performed by third-party AI providers who do not train models on your data — your documents are processed solely to generate your abstracts and analysis.

  • You retain full ownership of every document and data point you upload, and can delete your documents at any time.

Questions

For security questions or to report a concern, contact us at stephen@ridgelineai.com. For how we handle personal data more broadly, see our Privacy Policy.