Security for valuation firms Walled off in the database.
Every record belongs to one firm, and the database itself refuses to show it to anyone else. Here is what protects your data, what is tested, and the limits we know about.
Firm A cannot see firm B.
Every table that holds a firm’s data carries the firm’s id and a row level security rule tied to the signed-in person’s firm. A standing test fails the build if a new table arrives without one, and cross-firm tests prove a user in one firm cannot read or change another firm’s rows.
- Each firm’s rows carry its own id
- The database checks every query against your firm
- Tests try to cross the wall on every change
A test proves the rule it asserts. It does not make any system unbreakable, and we hold no security certification today.
Checked on the server, not just the screen.
Roles are data
Owner, admin and member are built in. Build your own roles, such as principal, valuer, reviewer, office manager or bookkeeper, from the permissions you choose.
Every action checks
Each server action checks the person’s permission before it touches data, and validates what it is sent.
Review rules in the database
A reviewer is never the valuer with carriage, and nobody approves their own round.
Two-step sign-in
Each person can add an authenticator app and sign out their other devices. It is optional per person today.
Who did what, kept.
What to look at
- Kept append-only
- Filter by action and by person
- When, who, what and which record
- People and the system, side by side
A real screen from Valufield, shown with an invented firm. Nothing is mocked up.
Nobody edits history
Nobody can edit or delete an entry, your firm and the platform included.
Job history by the database
Every change to a valuation job is also written to its own insert-only history.
Support access is recorded
If our support opens your firm, it is through a session written to the log when it starts and stops, which ends after 60 minutes.
How long the log is kept depends on the plan.
AI with firm limits.
AI never forms the value
AI may suggest wording for descriptive sections only. The database refuses it for the value, rates, adjustments, sales evidence and the certificate.
Nothing leaves without a person
Drafts wait for someone to read them and press Send. The eight automatic messages start switched off.
Licensed data stays out
Sales imported under a data licence are marked licensed and never sent to AI.
The checker uses no AI
It runs on our own server; no AI service sees your report.
Said plainly.
Who holds what, as it stands today. We will update this page when anything changes.
| What | Where it goes |
|---|---|
| Your records and files | A Supabase database and file store, walled off by firm. The production hosting region is being confirmed before launch, and we will tell you in writing. |
| AI requests | Sent to Anthropic with no region set, so they may be processed outside Australia. |
| Email from Valufield | Sent through Resend. |
| Card payments | Handled by Stripe, into your firm’s own Stripe account. |
| Everyone who processes data for us | Listed on our sub-processor list, which is a draft for legal review. |
Straight answers.
Is my firm’s data separate from other firms?
Yes. Every record belongs to one firm and the database refuses to show it to another. Automated tests check this whenever the code changes.
Where is our data kept?
In a Supabase database, walled off by firm. The production hosting region is being confirmed before launch, and we will tell you in writing. AI requests go to Anthropic and may be processed outside Australia.
Do you hold ISO 27001 or SOC 2?
No. We hold no security certification today, and we do not say otherwise.
Can we require two-step sign-in for all staff?
Not yet. Each person can turn it on for their own account, but a firm cannot require it today.
Can AI be switched off for our whole firm?
Yes. AI is a per-firm switch on our side. Ask and we turn it off for your firm.
What do we take with us if we leave?
Every report you release is yours as a file. An owner can download the firm’s record, members, roles and activity log from settings at any time. Ask us about a full export of your jobs before you sign.
What happens if there is a data breach?
Our draft terms commit us to tell your firm without undue delay and to help you meet your own obligations. The terms are a draft for legal review.
What about backups?
Backup and restore are part of the production setup that is still being confirmed before launch, with the hosting region. Ask us, and we will tell you in writing.
See it on a job like yours.
Tell us about your firm and we will show you Valufield on your kind of work, including what is released today and what is still in build. The form takes about a minute, and a person replies.
- We reply to arrange a time.
- We walk through the product on your kind of work.
- You decide, with no obligation.
Rather email? support@valufield.com.au