A remote assessment in three steps

Day 1

Pay and receive the intake form

Pay securely by credit card ($599 CAD). Within one business day, you'll receive a link to a confidential intake questionnaire by email.

The questionnaire covers five areas of your brokerage's current setup:

• Email infrastructure — domain, provider, how agents communicate with clients
• MLS and PropTx access — credential management, agent count, offboarding process
• Client data handling — where deal files are stored, how client PII is collected
• Wire transfer and deposit process — how instructions are communicated and verified
• Any existing policies — written security, data retention, or incident response documentation

The questionnaire takes most brokers 20–35 minutes to complete. You can complete it in one sitting or return to it — there is no deadline.

Days 1–5 after intake submission

We conduct the remote assessment

Once your intake is submitted, we conduct the assessment. This combines your questionnaire responses with observable technical signals:

• DNS record inspection — SPF, DKIM, DMARC configuration on your brokerage domain
• SSL/TLS review — certificate validity and configuration on your public-facing web presence
• Public-facing exposure check — observable admin panels, login pages, outdated software signals
• Email header analysis — indicators of impersonation risk and spoofing exposure

No access to your internal systems is required at any point. We do not install software, request network credentials, or access your email accounts. The assessment is entirely external and questionnaire-based.

Within 7 business days of intake completion

Receive your written report

Your report is delivered by email as a PDF. It covers all five assessment areas with findings, a risk rating per area, and specific recommendations.

The report is written in plain English — no technical jargon. It is structured so it can be shared directly with your broker of record, legal counsel, or E&O insurer without translation.

Report contents:

• Executive summary with overall risk rating
• Finding-by-finding breakdown across all five assessment areas
• Risk level per area (Critical / High / Medium / Low)
• Prioritized remediation roadmap — immediate, 30-day, 60-day, and 90-day actions
• One follow-up question answered by email at no additional cost