CREagentic is an AI-powered platform for commercial real estate built around The Analyst — a conversational AI employee that handles deal underwriting end-to-end: valuation, BOVs, waterfalls, dispositions, IC memos. You can also access individual analysis tools directly — rent roll parsing, T-12 parsing, environmental report analysis, and more — as power-user deep-links from the dashboard.

How does CREagentic compare to leading analysis software?

CREagentic provides transparent DCF valuation plus The Analyst — chat-driven rather than menu-driven. Individual analysis tools (lease abstraction, LOI redlining, CAM reconciliation, rent roll parsing, T-12 parsing, and more) are accessible directly or through The Analyst's workspace. CREagentic starts free with no implementation fees.

Property managers, asset managers, CRE brokers, accountants, and acquisition teams at REITs, private equity firms, and property management companies use CREagentic.

Yes. The free demo includes 10 one-time AI credits with no credit card required. Paid plans include monthly AI credits; complex documents use more credits. Advanced features like PDF/Excel exports and scenario analysis require a paid plan.

What is AI lease abstraction?

AI lease abstraction uses artificial intelligence to extract structured data from commercial lease documents in a fraction of the time manual review takes. CREagentic extracts 200+ fields including rent schedules, CAM provisions, options, and critical dates.

What is CAM reconciliation?

CAM reconciliation is the annual process of comparing actual common area maintenance expenses to the monthly estimates collected from tenants, resulting in either an additional charge or a credit for each tenant.

Security

Last updated: September 27, 2026

This policy was last updated on the date shown above. For questions, contact legal@creagentic.ai.

Infrastructure

CREagentic is hosted on Vercel's edge network with automatic DDoS protection. Our database is hosted on Supabase with PostgreSQL encryption at rest (AES-256) and in transit (TLS 1.3).

Authentication

We use Supabase Auth with Google sign-in and email/password sign-in. Passwords are never stored in plain text; Supabase Auth stores only salted password hashes. Optional multi-factor authentication (TOTP) is available for every account and required for administrators.

API Security

API keys are stored as SHA-256 hashes. Plaintext keys are shown once on creation and never stored. Per-minute and per-day rate limiting prevents abuse. All API traffic requires TLS.

Payment Security

All payment processing is handled by Stripe (PCI DSS Level 1 certified). We never store credit card numbers, CVVs, or full card details on our servers.

Data Isolation

The application server scopes every query to the authenticated user or organization, and row-level security is enabled on customer data tables so that direct database access is also restricted. Verification of these policies in the staging database is part of every release.

Account Protection

Accounts are limited to 2 concurrent sessions. Login fingerprinting detects account sharing across 5+ distinct locations within 7 days. Suspicious activity triggers automated alerts.

Vulnerability Reporting

If you discover a security vulnerability, please report it to security@creagentic.ai. We take all reports seriously and will respond within 48 hours.