Security
Security you can defend.
Your MLS login stays yours. Every source is hashed, scoped and kept.
HTTPS on every connection.
- YouAppraiser on the assignmentAllowed
- Your supervisorAdded to the assignmentAllowed
- Any other accountNot on the assignment0 rows
01Your MLS
Your login never leaves you.
You sign in and browse. ValueSwell captures only the page you choose.
See MLS captureValueSwell Source Capture
Chrome extension
Can
- Read the tab you choose, when you click Capture
Never
- Ask for your MLS password
- Read your browser cookies
- Browse listings on its own
02Evidence
Every capture carries a hash.
Page, screenshot, URL and time, sealed with sha256 when you capture.
- Scripts and credential fields stripped from saved HTML
MLS capture · 123 Oak StSample
Listing detail page
Captured 10:02 · Subject
- Listing URL
- yourmls.example/listing/123-oak-st
- Page HTML
- Scripts and form fields removed
- Screenshot
- Visible area · PNG
- Integrity
- sha256 4e1a…77c0
03Retention
Kept five years, even if you leave.
Workfiles can’t be deleted for five years, or while a legal hold applies.
- Account deletion keeps workfiles
- Every edit time-stamped in the ledger
Workfile · 123 Oak St · Sample
Kept 5 yearsCounty record captured · Parcel R05-612-031
10:05:03 · sha256 b83d…19fe
MLS page captured · Listing · 3 pages
10:02:40 · sha256 4e1a…77c0
Order accepted · 123 Oak St · Sample
09:58:12 · sha256 51b0…e93c
ValueSwell Source Capture
Chrome extension
Can
- Read the tab you choose, when you click Capture
Never
- Ask for your MLS password
- Read your browser cookies
- Browse listings on its own
Evidence
Sealed when captured. Kept five years.
- seal on every capture
- sha256
- workfiles kept, even if you leave
- 5 yrs
Contact
Found an issue? Tell us.
Send a description and safe reproduction steps. Leave passwords and private appraisal evidence out.
Report a vulnerability
For issues in the website, the mobile app or the Chrome extension.
security@valueswell.comGood practice
- Capture only listings your MLS lets you keep.
- Check the source before you accept an extracted field.
- Remove team access people no longer need.
FAQ
Security, answered.
Do you hold certifications like SOC 2?
We don’t claim any certification on this page. Ask us for data-processing terms, subprocessors and deployment details during procurement.
Can ValueSwell see my MLS password?
No. You sign in to your MLS in your own browser or the app’s capture browser. The extension never asks for your password or reads cookies.
Who can open a workfile?
The people on the assignment. Access is enforced in the database with row-level security, not just hidden in the interface.
What happens to workfiles if I close my account?
They’re kept. Workfiles can’t be deleted for five years from assignment creation, or while a legal hold applies.
