Trust at ReBillion
ReBillion is the AI-native transaction coordinator with brokerage-grade trust posture. Most AI TC tools don't ship a trust page at all. This is the AI control plane for real estate with security, privacy, and compliance treated as first-class.
Brokerage IT and broker-of-record decision-makers ask three questions before deploying AI TC software: is my data safe, is the SMS practice TCPA-clean, and does this stand up to a state audit? We answer each below with sub-pages that go deep.
Security
Encryption at rest (AES-256) and in transit (TLS 1.3). Role-based access. SSO available on Enterprise. SOC 2 Type II on roadmap; see /security/soc2 for current state.
Privacy
Aiming for GDPR and CCPA-aligned data subject controls* — data access, correction, and deletion requests handled via /contact while the self-serve controls are in development. Privacy policy at /legal/privacy-policy.
TCPA
Aiming for a messaging layer that is TCPA-clean by default* — consent capture, STOP routing, quiet-hours enforcement, and identification are in active development. See /security/tcpa.
Records retention
Aiming for per-state retention windows (CA, FL, TX, NY, IL, GA, MA, CT) with audit-ready export* — in development. See /solutions/document-custodian.
Compliance roadmap
SOC 2 Type II target — see /security/soc2 for current state and timing. ISO 27001 evaluated. HIPAA out of scope.
DPA on request
Aiming to offer a standard Data Processing Addendum with EU SCCs for EU customers* — reach out via /contact to discuss current options.
* In progress — program under active development, not yet fully available in product.
Frequently asked
Are you SOC 2 certified?
We are in pre-audit. Type II target dated on the /security/soc2 page. We share readiness evidence under NDA.
Do you support SSO?
Yes for Enterprise. SAML 2.0 and OIDC.
Is the data encrypted?
Yes. AES-256 at rest, TLS 1.3 in transit. Key management via KMS.
Where is data stored?
U.S. by default. EU residency available on Enterprise.
Do you have a bug bounty?
Reach out via /contact for the responsible-disclosure process.
Can I get a DPA?
We are aiming to offer a standard DPA with EU SCCs — it is in progress. Reach out via /contact to discuss current options.
See the AI control plane on your real files.
30-minute live demo with the founders. No sandbox; we run on your contracts.