Your data
A home record is an intimate thing.
What you keep in Casa says where you live, what you own, what you paid and who comes to your door. That deserves to be treated more carefully than most software treats most data. Here is exactly how it is treated.
It is never sold, and it never advertises.
Casa is software you pay for, not an audience someone else pays for. Your home record is not shared with brokers, insurers, contractors or advertisers, and there is no advertising in the product.
Taking it out is a button, not a favor.
Every document you have uploaded downloads as a single archive whenever you want it — not something you have to ask a retention team for. That includes the day you sell and hand the record to the next owner. The same button for the structured record — every field, not just the files — is on the list below.
Delete means delete.
Remove an item, a home, or the whole account, and the files that lived with it go too — not just the row that pointed at them. Casa is explicit about what a delete takes with it.
Permissions are checked on the server, every time.
Access is a grid of modules and capabilities per person. Every read and every write is authorized against it. Hiding a button is a courtesy; the check behind it is the actual protection.
Photos do not carry your address around.
A photo from a phone carries GPS coordinates, a timestamp and the device serial. Casa strips that metadata from images as they are stored — including the HEIC files an iPhone produces by default.
The Agent sees your record, not you.
Before anything is sent to a language model, Casa redacts the household’s identity and the precise address. The Agent can also only ever reach what the person asking could reach themselves.
Encryption
Where the locks actually are.
- In transit
- Everything moves over HTTPS. In production the browser is never permitted to fall back to plain HTTP.
- At rest
- Your database and your uploaded files are encrypted where they are stored.
- Field level
- Particularly sensitive values get a second layer — encrypted individually with authenticated encryption, so a database copy alone does not reveal them.
- Uploaded files
- Files are served from an isolated, sandboxed context, so a hostile document sitting in storage cannot execute against your account.
Working toward
What is not true yet.
Casa is a young product, and a trust page that quietly implies otherwise is not worth reading. These are commitments in progress, listed here rather than claimed as done.
- A one-click export of the structured record — every field, not just the documents
- Reminders that reach out to you: Casa keeps the dates today, but you have to look
- SOC 2 Type II certification
- Annual third-party penetration testing
- Two-factor authentication required on financial modules
- Per-user audit trails visible to the home owner
Sharing is deliberate, not implied.
A home is rarely run by one person, and giving someone the keys should not mean giving them everything. Casa lets you grant access module by module — full access to Maintenance, nothing at all in Mortgage, if that is what you mean.
How sharing and permissions work →Start your home record.
Create an account and add your first home. It takes a few minutes, and everything you put in stays yours.