Trust Center

Trust and Transparency

Housing Link is run by a small team that takes how we store, transmit, and deliver data seriously. This Trust Center details our system design choices, the technologies we use, and the vendors we trust to make it happen.

Cloud Infrastructure
AWS & Cloudflare
Based in the USA · Delivering Globally
Payments
Stripe
Industry-standard processing
Authentication
Auth0
Industry-standard SSO
AI
Open-Source Models
Private by design

Infrastructure and Security

When building Housing Link, we intentionally store only what's necessary to power it. Less data stored means less data at risk. We bring that same intention to how we transmit, deliver, and back up your data, so it stays safe even after it's used.

Cloud infrastructure
Housing Link runs on Amazon Web Services and Cloudflare. We run redundant infrastructure so the platform stays fast and available, even during high-traffic moments.
DDoS & traffic protection
Cloudflare also stops malicious traffic and denial-of-service attacks before they reach our systems, keeping the platform available and your data protected.
Authentication by Auth0
Authentication is handled by Auth0 (Okta). Auth0 handles sign-ins, password resets, brute-force defense, and locking accounts experiencing suspicious access attempts.
Sensitive fields encrypted
When a field is built to hold sensitive information, like a Client's name or their pre-approval status, the data is encrypted before it's written to the database.
Encrypted in transit
Every connection to housing.link, from your account dashboard to a Housing Link sent to a client, is encrypted in transit. HTTP requests are redirected to HTTPS.
New
Signed URLs
Launched in 2026, uploaded documents are now served using signed, self-expiring URLs, so they can't be accessed without accessing them through Housing Link.
Secret Storage
Internal credentials and third-party API keys live in dedicated secrets vaults, and are only accessible to those who need them. We also isolate production from our development environments.
Security Scans
We use multiple tools to monitor dependencies and audit for vulnerabilities. New issues are flagged as soon as they're disclosed, helping us limit our risk and exposure.
Hourly backups
Backups of our data, files, and infrastructure run every hour and are retained off-site, so we can restore quickly in case of emergency or system failure. We test backups regularly.

Housing Link Logs

A record of what happens in your account, kept for you and the compliance team you work with. Each entry says who did what, and when, so your team can review a change long after it was made.

What’s recorded
Settings you save, pages and records you create, edit, or delete, who can see a page, the integrations you connect, sign-ins, and requests made to Housing Link AI. Each entry says who did it, when, and what changed, with the value before and after.
Housing Link AI drafts, people publish
When Housing Link AI writes or changes a draft, the entry names Housing Link AI. Only a person can publish, and publishing is always its own entry, made by the person who published.
What isn’t
Passwords, API keys, tokens, and payment details are never written to a log. An entry may show the last four characters of an API key, so you can tell keys apart. When a change involves personal information, like a name or a Client’s details, the values before and after are encrypted before they’re written. What visitors do on your pages stays in analytics, separate from your logs, except that a Lead Form logs that a lead arrived.
Encrypted copies
Every version and draft of a page, and every copy of custom code, is encrypted before it’s written to the database. The text of requests to Housing Link AI isn’t kept.
Used for nothing else
Logs are used for security, for your account’s history, and by your compliance team. They’re never used for marketing, product analytics, or AI training.
Can’t be edited
Entries and versions of pages are written once and never changed or deleted. A daily fingerprint of each day’s entries, which carry each version’s own fingerprint, shows if one ever is.
Yours to see and export
Every entry about your account is in Settings, under Logs, and you can download them as CSV or JSON. Team owners also see what their teammates did while they were on the team.
Staff access is recorded
If someone at Housing Link edits one of your pages or opens your logs, the entry says so.
Kept for the record
Activity, every version of a page, and every draft are kept indefinitely, so the record is there when a compliance review asks for it. IP addresses and browsers are recorded for sign-ins.

Logs are a record to help your team review what happened. They aren’t legal advice, and keeping them doesn’t by itself make anything compliant.

Housing Link AI

Private, by design. Housing Link AI was built as a feature, not a product to be monetized, so you don't have to choose between using it and protecting your business. Requests are processed on their own and we never train on your data.

Open-source models
Housing Link AI is built on open-source models like Gemma, Llama, Mistral, and Qwen, run within our existing infrastructure rather than through a separate AI vendor.
No memory between requests
Each request is handled on its own and can only see the prompt and files you provide. The model keeps no history, so one request can never see the data from another. Your Logs record that a request was made, never its text, and the model never sees them.
No general internet access
We feel general internet access is not appropriate for our use cases, so Housing Link AI cannot browse websites or perform searches. Output is based on system instructions, your prompt, and the file(s) you provide.
No OpenAI, Anthropic, or Google
Housing Link AI runs on open-source models within our existing infrastructure. Your data is never sent to consumer AI providers like OpenAI, Anthropic, or Google.
No AI model training
We do not use any of your data or prompts for AI training purposes. Because AI is a feature, not a product, we have no reason to build or fine-tune our own model.
Human in the loop
Housing Link AI can’t publish content, and it never saves your work for you. It gives you a draft that you can edit, rewrite, or throw out, and nothing reaches your clients until you review and publish it yourself. Your Logs keep each step apart: what you asked for, what Housing Link AI drafted, and who published it.
Public Beta

Safety Check

Real estate and mortgage marketing is governed by rules about what you can and can't say. As you write, Safety Check flags wording that may conflict with fair housing, fair lending, or advertising guidelines, so you can catch it early. When in doubt, please consult your compliance team or legal counsel.

Content
H1 H2 B I
Welcome to this beautifully updated home, located in Yorba Linda with a number of top-rated schools nearby.
Word Count: 17 Safety Check: 1 Concern
How it works
Checks as you write
Safety Check works as you write, scanning your words for over 400 possible issues across 45 categories. Matches are sorted by severity (critical, concern, or consideration) and stay out of the way until you're ready to review them.
Grounded in FHA, HUD, HOPA, and ECOA
Rules vary by industry, company, and jurisdiction, so Safety Check focuses on the most established ones: the Fair Housing Act, HUD guidance, the Housing for Older Persons Act, and the Equal Credit Opportunity Act, plus common MLS practices.
Flagged, never forced
Safety Check flags wording that you type but never edits it directly unless you apply a suggestion. When Housing Link AI drafts content for you, it uses our Safety Check dictionary to limit possible issues.
What it checks
Critical
Words that are almost always problematic, like slurs and explicit protected-class exclusions, are marked as Critical Issues. Housing Link AI is instructed to never use words in this category.
Disability or health exclusions Disability slurs LGBTQ exclusions LGBTQ slurs Racial or ethnic exclusions Racial or ethnic slurs Redlining language Religious exclusions Religious slurs Sex or gender exclusions Sex or gender slurs
Concern
Words that have a high chance of being an issue but can be appropriate in the right context are marked as Concerns. Each comes with an explanation of the issue.
Ability-coded language Age preferences Approval or exclusivity gates Assistance-animal exclusions Citizenship requirements Criminal-history exclusions Disability references Familial-status exclusions Gender-coded language Marital-status preferences National-origin preferences Possible housing discrimination Possible lending discrimination Possible neighborhood characterization Possible neighborhood trajectory Possible school-quality claim Race preferences Sex or gender preferences Source-of-income limits
Consideration
Words that are frequently used and have acceptable use cases, but can be used inappropriately. Flagged for you to consider based on context and usage. (e.g., Spanish Tile, White Cabinets)
Age-coded words Board-approval requirements Coded wording Color mentions Country-club mentions Family mentions Health or ability mentions Marital-status mentions Master terminology MLS-flagged words Nationality mentions Occupancy wording Orientation mentions Place of worship mentions Religion mentions

Safety Check is a general resource, not legal advice. Safety Check offers general suggestions to help you spot wording worth a second look. It makes no representation that your content complies with any law or regulation, and it isn't a substitute for your own review. For questions about fair housing, lending, or advertising rules, you can consult your compliance team or legal counsel.

Sub-processors

These are the third-party services that process customer data on our behalf. We update this list when it changes.

AdRoll
Advertising
Amazon Web Services
Cloud infrastructure
Apple
Maps and geocoding
AppSignal
Error monitoring and support diagnostics
Auth0 (Okta)
Authentication and session management
Circle
Community platform
Cloudflare
Cloud infrastructure
Front
Customer support
Google
Maps, geocoding, and Business Profile review import
HouseCanary
Property data and address lookup
Mailchimp
Email marketing and newsletters
Meta
Advertising
Microsoft
Business productivity and email
Slack
Internal team communication
Stripe
Payment processing

System Status

We run a live status page at status.housing.link where you can check platform health any time. In the event of an incident, we post it there first — with timestamps, scope, and updates through resolution.

Open the status page →

Security Issues

We take responsible disclosure seriously. If you've spotted a vulnerability or something that looks off, send us a note — we'll get back to you as soon as possible (replies typically happen within one business day) and work with you to investigate and resolve.

Email [email protected] →

Contact Us

If something on this page doesn't answer your question, reach out and let us know. We read every message and reply ourselves.

Email [email protected] →