). That restores the widget everywhere it appears. Hidden on: June 20, 2026 (privacy/architecture update). ============================================================== -->
◆ Data Privacy & Security

Governance built in
from day one.

Institutional real estate firms handle sensitive deal data, LP information, and proprietary underwriting. Epps.ai is designed with that responsibility in mind — not as an afterthought.

◆ Honest disclosure: Epps.ai is an early-stage platform. The principles below reflect how the system is architected today. Enterprise-grade features like role-based access controls and audit logging are actively in development. We will never overstate what exists.

◆ Core Principles

What governs every interaction
with Epps.ai today.

🔒
Live — Enforced Today
Zero Persistence
Inputs processed within the active session only. No client data is retained by Epps.ai infrastructure after the session ends. Nothing is written to disk or stored server-side.
🚫
Live — Enforced Today
No Model Training
Client data is never used to train, fine-tune, or improve AI models. Inputs are processed and discarded. Your deal data stays yours.
🌐
Live — Enforced Today
Transmission Security
All AI API requests encrypted in transit via TLS 1.2+. Browser-native tool execution means reports are generated locally — data never transits a third-party server unnecessarily.
🏗️
Live — Enforced Today
Browser-Native Architecture
Financial calculations, modeling, and exports run in the user's browser. Excel files, rent rolls, and pro formas are parsed locally and never uploaded to any server. Optional AI-assisted features transmit only the content explicitly submitted by the user to the configured AI provider.
🔐
In Development
Role-Based Access
User-level permissions, org management, and access controls for multi-user enterprise deployments. Analyst, manager, and admin roles with scoped access.
📋
In Development
Audit Trail Logging
Timestamped activity log per user and session. Full query audit trail for enterprise clients requiring compliance documentation and oversight.
◆ How It's Built

Architecture designed for
institutional standards.

Epps.ai separates local computation from optional AI assistance, giving clients clarity and control over how their data is handled.

◆
Local-First Processing
All financial calculations, modeling, reporting, and exports occur locally within the client browser. Uploaded files are parsed locally and never uploaded to a server.
◆
Optional AI Assistance
AI-assisted features transmit only the content explicitly submitted by the user to the configured AI provider. No background collection or persistent storage occurs within Epps.ai infrastructure.
◆
Deployment Flexibility
Hosted, private-tenant, and client-environment deployment options are available — with the model determined by client governance requirements. Custom domain and branding supported.
◆ Compliance Posture

Built for institutional
standards.

Epps.ai is designed to meet the expectations of institutional real estate firms and their LPs. Our compliance posture reflects current capabilities and the direction of our governance program.

◆
Current
Data Protection by Design
Client is sole data controller. No client financial data is retained by Epps.ai infrastructure. GDPR and CCPA aligned; DPA available for enterprise clients.
◆
Current
SEC-Aligned Handling
Consistent with Regulation S-P principles — client retains control of all financial data; no third-party sale of personal data.
◆
Planned
SOC 2 Program
SOC 2 readiness underway. Independent auditor engagement and certification are planned as the platform matures toward broad institutional deployment.

Detailed security controls, deployment architecture, data-flow models, sub-processor information, and our full compliance roadmap are documented in the Epps.ai Governance & Deployment Package, available to qualified prospective clients during evaluation.

◆ For Qualified Prospects

Request the full
Governance & Deployment Package.

A comprehensive institutional package covering governance framework, technical architecture, deployment models, security controls, data residency, and our compliance roadmap — prepared for CIO, CTO, CISO, and compliance review.

Request Full Governance & Deployment Package

Questions about data governance?

We're happy to discuss architecture, deployment options, and compliance requirements for your specific situation.

Talk to Us Get in Touch
Privacy Policy & ToS → Data Processing Agreement →