Security at DoorTick

1. Data Encryption

• In Transit: All communications between your browser, our mobile application, and our servers are encrypted using industry-standard TLS 1.2+ (HTTPS). This ensures your data cannot be intercepted while in motion.
• At Rest: All database records, user credentials, and uploaded documents (such as receipt images and mortgage statements) are encrypted at rest using AES-256 encryption.

2. Secure Cloud Infrastructure

DoorTick is hosted on Google Cloud, leveraging the same secure, SOC 2-compliant infrastructure trusted by major financial institutions. We employ strict firewalls, isolated virtual private clouds (VPCs), and automated vulnerability scanning to protect against unauthorized access and network threats.

3. AI & Document Privacy (Smart OCR)

We utilize advanced artificial intelligence (Google Vertex AI) to parse dates, totals, and merchants from your uploaded receipts.

• No Public Training: Your receipts, financial documents, and the data extracted from them are processed securely and are never used to train public AI models or shared with external third-party advertisers.
• Ephemeral Processing: Once the text is extracted to update your Schedule E ledger, the AI processing session is terminated securely.

4. Strict Access Controls

• Tenant Isolation: Your data is strictly logically separated from other users. You can only access the properties and ledgers tied to your authenticated account.
• Internal Access: MAS Tech Ventures LLC enforces the principle of least privilege. Our engineers and support staff do not have access to view your unredacted receipts, property addresses, or financial ledgers unless you grant explicit, temporary, written permission to troubleshoot a specific customer support ticket.

5. Backups and Reliability

To protect you from data loss, your property ledgers and configurations are backed up continuously. In the event of a system failure, our disaster recovery protocols are designed to restore service and preserve your critical tax data quickly and completely.

6. Report a Vulnerability

If you are a security researcher or a DoorTick user who has discovered a potential security vulnerability in our web or mobile application, please contact us immediately at om@doortick.com. We prioritize security reports and will investigate all legitimate claims promptly.