Real-estate AI assistant TheLibrarian.io passes a Google security audit but has not completed SOC 2, and discloses no insurance

TheLibrarian.io, an AI assistant marketed to real-estate agents, reads a client's Gmail messages, Calendar events and Drive files "to power the features you use," and connects to a dozen named tools including MoxiWorks, MLS data, Zillow, Redfin and WhatsApp, according to its own site.

The company has passed one third-party security check but not another. "The Librarian completed Google's Cloud Application Security Assessment (CASA), a third-party security audit required for applications accessing restricted Google API scopes," its security page states. On a broader standard, the same company is more candid: "SOC2 compliance is a work in progress, with certification anticipated in 2026" — meaning it does not hold that certification now.

The company says it limits what it asks for and requires consent before deleting data: "We request only the minimum permissions needed to provide our features," and "No Deletions Without Consent." It also describes encryption at rest and in transit: "All user data is encrypted in transit and at rest, using AES-256 encryption for disk storage."

AI Dispatch's trust-gap rubric, scored against the company's published material on Oct. 8, finds real but partial governance disclosure. Runtime governance scores 1 of 3: a minimum-permissions policy enforced through Google's OAuth scopes, short of any published spend or authority limit. Compliance also scores 1 of 3 — the CASA audit is a genuine published assurance artifact, offset against the open SOC 2 gap described above. Audit trail scores 0: the security page's "audit logs to monitor access" describes the vendor's internal monitoring of staff access to customer data, not a customer-reviewable record of what the AI agent itself did. Outcome settlement and insurance-indemnity both score 0: no pricing or payment basis is published, and a full-text search of the company's security page (6,215 characters, fetched Sept. 24) and homepage (8,284 characters, fetched Aug. 1) found no occurrence of "insurance," "indemnif," "warranty" or "liabilit[y]."