Plain answers
about your data.
Castrum is early stage. We'd rather tell you exactly what's true today than claim certifications we don't hold.
Overview
The basics.
Encryption
Data is encrypted in transit (TLS) and at rest (AES-256), via Supabase's managed Postgres infrastructure.
Audit logging
Status changes, approvals, denials, attestations and document actions are logged with the person who took them and a timestamp.
Organization isolation
Every request inside the app is checked on the server against the signed-in person's organization and role.
Access model
Fewer accounts, fewer ways in.
Only your compliance team signs in to Castrum. Loan officers, realtors, marketers and other requesters never get accounts — they submit through your organization's links and reply by email.
A person's role and organization are read from trusted server-side records, never from anything they can edit themselves. Products you haven't turned on are blocked on the server, not just hidden from the menu.
Subprocessors
The services we run on.
| Provider | What it does for Castrum | Data it handles |
|---|---|---|
| Supabase | Database, authentication and file storage | All application data and uploaded documents |
| Vercel | Application hosting | Requests to the application as they're served |
| Resend | Transactional email | Email addresses and the content of notification emails, ticket replies and invoices |
| Anthropic | AI processing | The inputs listed under “AI and your data” below |
| ImprovMX | Forwarding for support@castrumhq.io | Emails sent to our support address |
When email intake for Castrum Tessera goes live, its inbound email provider will be added here.
AI and your data
Exactly what the AI sees.
Castrum's AI features run on Anthropic's models. Here is everything each feature sends. By default a person makes every decision, and AI features can be switched off for your organization.
Fair-market-value research (Porta)
The request's details: type, amount, cost split, cadence, market, deliverables, free-text notes, event details (name, date, attendees, sponsorship package, reach), and the names of the loan officer and the partner or event host. It also runs public web searches through Anthropic's search tool; queries can include the partner's business name and the event name.
Ad review (Signum)
The ad itself — its text and any uploaded images or PDFs (up to 5 files) — plus the ad type, platform, the states it will run in, the NMLS ID the submitter entered, and the rules your organization has turned on. If the submitter is on your licensing roster, it also sees their name, NMLS ID, licensed states and license status. It does not see the submitter's email, and it can't open links.
Document field extraction (intake forms)
A document a submitter uploads, so its details can fill in the form for them to check.
If the AI finds that an ad fails a rule your organization marks critical, it can’t approve it. Automatic ad decisions are optional, made only on ads the AI fully read, logged as AI decisions, and a submitter can escalate a denial to a person. Licensing problems are checked by Castrum directly, not by the AI. Fair-market-value research is presented as research for a reviewer — not as a determination.
Security questionnaire
Send us yours.
Have a vendor security questionnaire or specific requirements? We'll answer it directly, or walk through it with your team. Email support@castrumhq.io.