Security and data handling
Moraine processes confidential commercial real estate deal documents. This page describes the currently published security position; contractual requirements should be confirmed during your security review.
SOC 2 status
SOC 2 Type II management assertion letter completed; the audit report has not yet been issued. Moraine does not represent this as an issued SOC 2 Type II audit report. If your procurement process requires that report today, confirm availability before uploading documents.
Customer documents and AI models
Customer documents are never used to train Moraine's or third-party models. AI processing involves external service providers; a no-training policy does not mean that documents never leave Moraine’s infrastructure. Our privacy policy describes processing and service-provider categories, including AI document analysis.
Firm isolation and access
Each firm's data is isolated from other customers at the database level. Access is scoped to the customer organization. Enterprise SSO/SAML availability and requirements are agreed during the deployment security review.
Retention, deletion and provider review
Contact privacy@morainecre.com about retention, deletion or data rights. Confirm provider/subprocessor details, processing regions, retention terms, backups and any contractual requirements before submitting restricted documents. This page does not promise a specific retention period or region.
Request security materials
Email support@morainecre.com for security questions, diligence materials or to report a suspected issue. Include the affected product area and a description; do not send customer documents or credentials in your initial message.
Reviewed October 18, 2026. Privacy policy · Terms · About Moraine