Are Reports Encrypted? What Valuers Should Check

A draft valuation report can contain far more than a market value. It may include borrower information, lease terms, tenant covenant commentary, comparable evidence and lender-specific instructions. So, when a team asks, are reports encrypted?, they are asking the right first question. But encryption alone does not establish whether a document is being handled appropriately.

For a valuation firm, the useful question is broader: what happens to the report from the moment it leaves the surveyor's desktop to the point the review findings are returned? That includes transmission, storage, access, retention and whether the document is used for any purpose beyond the review.

Are reports encrypted in transit and at rest?

There are two basic points to establish. First, is the report encrypted while it travels between your browser and the supplier's systems? Second, is it encrypted while held on those systems, even temporarily?

Encryption in transit protects a report as it moves across the internet. In practical terms, it reduces the risk of someone intercepting a document between the valuer's device and the review platform. Encryption at rest protects the file once it has reached the supplier's infrastructure. Both matter. A platform that encrypts uploads but then retains accessible copies in ordinary storage has only addressed part of the risk.

Ask the supplier to explain this in plain terms. They should be able to confirm that reports are encrypted in transit and at rest, without relying on vague statements about being "secure". They should also be able to explain where encryption keys are managed and who can access the underlying data.

The answer will not always be identical across providers. Some systems retain documents for a defined period to allow users to revisit an audit. Others process the document, return the findings and remove the report. Neither approach should be assumed. It needs to be stated clearly and assessed against your firm's requirements and the instruction in hand.

Encryption is only one part of confidentiality

A well-encrypted report can still be exposed if access controls are weak. Consider a report with a valuation of £2.35 million stated in the executive summary, but £2.30 million in the valuation certificate. A review tool may correctly flag the £50,000 mismatch. The confidentiality question is who, other than the authorised user, could see that report and finding.

Access should be limited by role and necessity. Your team should understand whether the supplier's staff can view uploaded reports, in what circumstances, and whether access is recorded. Multi-factor authentication, individual user accounts and sensible permission settings are not decorative features. They reduce the chance that a former employee, a shared mailbox or an unintended recipient can access sensitive instructions.

There is also a practical difference between a platform that holds a document as part of its normal operation and a supplier that can access it manually for support or technical investigation. Manual access may sometimes be necessary, but it should be controlled, exceptional and transparent. A serious supplier should be prepared to describe its process rather than simply say that staff access is restricted.

Ask what happens after the report is reviewed

Retention is often the point at which otherwise sensible security discussions become unclear. A platform may process a report securely, yet retain the original file, extracted data or review output longer than the firm expects.

For valuers, that matters because reports are living professional documents. A draft may be revised after a comparable is removed, an EWS1 disclosure is added or a yield assumption is reconsidered. Keeping multiple versions in an external system can create uncertainty over which copy is current and who retains access to each version.

Before using any document-review service, establish:

• whether the original report is stored after processing;
• how long any report content, extracted data and review findings are retained;
• how deletion works, including whether it can be requested by an authorised user;
• whether backup copies are retained for a period; and
• whether the supplier uses report data to train models or develop products.

The final point deserves a direct answer. Confidential valuation reports should not become material for a general-purpose model simply because they have been uploaded for review. If a supplier says it does not train on customer reports, ask whether that applies to both the original documents and any data extracted from them.

Data location can matter, but it is not the whole answer

Some firms and clients will require information about where data is processed and stored. That is reasonable, particularly where lender instructions, internal policies or contractual terms set expectations around overseas processing.

However, data location on its own is not a complete security assessment. A UK-based server with poor identity controls is not automatically safer than a well-managed environment elsewhere. The better approach is to consider location alongside encryption, access permissions, retention, contractual terms and the supplier's approach to incident management.

For a UK valuation practice, it is sensible to ask whether data is hosted and processed within the UK, whether any sub-processors are involved, and whether the supplier can provide the relevant data-processing documentation. If a client has a specific restriction, check it before uploading the report. Do not assume that a tool's general security statement answers an instruction-specific requirement.

The report should remain under the surveyor's control

Security concerns are sometimes mixed up with a separate concern: whether AI review gives a third party influence over the valuation. It should not.

A document-review tool can read a report as one document and flag points that warrant a second look. For example, it may identify that a comparable schedule states 1,250 sq m while the narrative refers to 1,205 sq m, or that a stated market rent does not reconcile to the adopted rate per sq ft. It can also flag a missing disclosure against a client requirement or a contradiction between the unexpired term in the tenancy section and the investment summary.

Those are prompts for the valuer to assess. The tool does not inspect the property, select comparables, determine market value or make the professional judgement required by the Red Book. The report remains the surveyor's work, and the surveyor decides whether a finding is relevant, how it should be resolved and when the report is ready to issue.

That distinction also helps with confidentiality. The supplier should be processing the document only to provide the agreed review service, not asserting ownership over the report or its conclusions.

Questions worth putting to any review supplier

The most useful supplier conversations are specific. Rather than asking whether a system is "AI secure", ask how a particular report is handled. Can the supplier confirm encryption in transit and at rest? Is the report retained after the review? Can their employees access it? Is it used for model training? Where is it processed? What happens if a user deletes it? Can the firm obtain written confirmation of the arrangements?

Also ask how the platform separates customers. A valuation team needs confidence that one firm's reports, findings and user accounts cannot be viewed by another. This is particularly relevant where the platform is used by several offices, panel managers or lender-side review teams with different access needs.

The answers should be proportionate and intelligible. Technical detail is useful, but it should lead to a clear operational understanding: who sees the report, where it goes, how long it remains there and why.

Security should support better review, not add another risk

The right review process should make it easier to scrutinise a draft before it leaves your desk, without creating a new confidentiality concern. That means checking the provider as carefully as the platform checks the report.

WriteUp is designed around private, encrypted processing, with no storage of reports and no use of customer documents for model training. Its role is limited to providing a second pair of eyes: flagging figures that do not reconcile, inconsistent lease details, missing evidence and report-wide contradictions for the surveyor to review.

A useful test is simple. If you can explain the data journey clearly to a director, a client or a lender-side reviewer, you are in a stronger position to use the tool with confidence. If the answer relies on assumptions, ask more questions before the next report is uploaded.