Roadmap

Documents & Intelligence

• ✓Document storage connectors: Egnyte, Google Drive, and direct upload
• ✓Source evidence designed to include document, page, and clause citations; verify material claims
• ✓PDF, DOCX, XLSX support, including scanned and image-heavy documents
• ✓Document tools in chat: PDF redaction and page edits, spreadsheet generation, chart reading
• ✓Portfolio database: properties, tenants, and leases queryable in plain English
• ✓Automated lease abstraction — an admin-dispatched deep-read pass extracts structured lease terms (notice deadlines, renewal options, CAM structure, insurance minimums) into the portfolio's lease-intelligence fields
• ✓Adaptive tiered AI — fast answers for simple questions, deep reasoning for complex analysis
• ✓Export to PDF, Word, Excel, PowerPoint

Operations

• ✓Work orders: create and track from chat — permission-gated, confirm-first, with status history and selected audit events
• ✓Work-order vendor management: vendor roster, assignment, cost approval requests, vendor email drafting and sending, and recorded invoice amounts
• ✓Email assistant: Microsoft 365 and Gmail — search, drafts, and daily briefings
• ✓Calendar assistant: create, read, update, delete events on Microsoft 365 and Google Calendar — write actions depend on the scopes the connected account granted
• ✓Proactive agents: morning briefing, email triage, and lease-expiry scan — every run health-tracked and logged
• ✓In-app notifications with deep links to the source email, chat, or work order
• ✓Conversation history, sharing, projects, and long-term memory
• ✓REST API access for custom integrations

Security & Compliance

• ✓Microsoft and Google SSO plus local password accounts; local passwords are stored as one-way hashes, with optional TOTP MFA
• ✓Role-based access control: viewer, member, admin, plus organization-defined custom roles
• ✓Per-organization isolation with PostgreSQL Row-Level Security and dedicated real-Postgres regression tests; default-branch PR enforcement still requires the documented CI bootstrap
• ✓Server-enforced allow, confirm, or block policies for supported external actions; sensitive workflows require explicit confirmation
• ✓Prompt-injection and exfiltration screening on retrieved content
• ✓Append-only audit logging with correlation IDs, enforced at the database level
• ✓DSAR export and erasure endpoints (GDPR Articles 15, 17, 20), with audit-log pseudonymisation
• ✓Backup and restore-drill tooling with dated development-path evidence; the modern encrypted, application-role production path still requires an executed drill

• ●SOC 2 readiness evidence and control hardening (no Sevrel SOC 2 report yet)
• ●Tenant self-service portal — photo-attached requests via secure magic links (in security hardening ahead of general enablement)
• ●Document comparison (track redlines between lease versions)
• ●Webhook notifications for critical date alerts
• ●Amazon S3 connector — limited availability: search and retrieval work, but changes are picked up by the nightly re-index rather than a live change feed, and bucket permissions are not mirrored per user. Ask us before relying on it

Enterprise Assurance

• ○Zero-Data-Retention agreement with our AI provider, covering every model path
• ○Independent penetration test with published executive summary
• ○Security log streaming / SIEM export for customer security teams
• ○Contractual uptime SLA with defined recovery objectives, plus multi-region failover
• ○Scheduled automated backup verification, following an executed restore drill on the current encrypted, application-role production path (the only dated drill to date exercised the earlier plaintext development path)

Platform

• ○Granular permissions: property-, entity-, and department-level access with segregation of duties
• ○Additional document connectors (Dropbox, SharePoint, OneDrive)
• ○Vendor-facing portal (vendors have no authenticated surface today) and end-to-end invoice ingestion and approval routing
• ○Additional portfolio intelligence agents, scoped from customer demand (the earlier CapEx sentinel, NOI drift, covenant pulse, and occupancy tracker experiments were retired and are not planned for return)
• ○Mobile application (iOS and Android)