The AI Rule for Real Estate Was Written Into Your License.

Real estate adopted AI faster than almost any profession. A Realtors Property Resource survey of NAR members found 82 percent of agents have brought AI tools into their business, most of them for writing, and two thirds of those users touching the tools daily or several times a week. Nobody needed a policy to make that happen. Now ask the quieter question: what has been pasted into those tools alongside the listing descriptions? Because the duties covering a transaction file were written long before AI existed, and they reach these tools just fine.

This is the seventh piece in our series on what AI actually means for regulated work, and real estate is a special case: the industry with some of the fastest AI adoption is also the one moving the most sensitive financial paperwork a family will ever produce.

What is actually in the file, and where it is going

Think about one active transaction. A pre-approval letter. Bank statements for proof of funds. A buyer's whole financial story in a lender conversation. Government IDs. A settlement statement with account numbers on it. Payoff letters. Wire instructions.

Now think about a normal week. An agent pastes a buyer's financial situation into a chatbot to draft a stronger offer cover letter. A transaction coordinator uploads an inspection report to get a summary for the addendum. A processor at a title company drops a payoff letter into an AI tool to extract the numbers. Someone installs a browser extension that reads every open tab, and one of those tabs is the transaction management system. Nobody is being careless on purpose. Everyone is saving twenty minutes on a file that is one of ten.

The cross-industry numbers say this is routine, not rare. Verizon's 2026 data breach report found 45 percent of employees now regularly use AI tools at work, up from 15 percent a year earlier, and 67 percent of the people using AI on corporate devices were signed in with non-corporate accounts, outside any control the brokerage or the firm has. IBM's 2026 breach study found shadow AI involved in 43 percent of the security incidents it examined, up from 20 percent. Those figures span every industry. An industry where 82 percent already use the tools has no reason to think it sits below them.

The rules did not need an AI clause

Here is the part most agents and even many title operators have not looked at closely: depending on which seat you sit in, this was already covered.

If you are a licensed agent, your license came with the rule. Virginia writes it directly into the brokerage statute: a licensee engaged by a seller must, in the law's own words, maintain confidentiality of all personal and financial information received from the client during the brokerage relationship, unless the law provides otherwise or the client consents in writing. The buyer-side statute carries the same duty, and confidentiality obligations like these are standard across state license law. Nothing in that sentence needed the word AI. A consumer chatbot on a personal account is an outside service with no duty to your client, and personal and financial information pasted into it has left your control in exactly the way the statute is about.

If you sit on the settlement or mortgage side of the closing, a federal rule already covers you. The FTC's Safeguards Rule under the Gramm-Leach-Bliley Act treats businesses significantly engaged in financial activities as financial institutions and requires a real information security program: risk assessment, safeguards, employee training, and control over how customer information is accessed and disclosed. Mortgage brokers are on the FTC's own example list, and the title industry's association notes that companies whose business is closings and settlement, rather than title insurance itself, are subject to the rule, while the insurance side answers to state insurance regulators under the same law. The FTC's guidance also carves ordinary brokerage activity out, so the agent is not covered while the settlement desk of the same closing is. An unapproved AI tool holding customer financial data is precisely the kind of uncontrolled disclosure those programs exist to prevent.

Two different seats, two different rulebooks, one identical conclusion: the client's financial file does not go into tools nobody vetted, and that was true before anyone wrote an AI policy.

The honest part, and the reason this is not theoretical

Nobody has been fined yet for pasting a buyer's bank statement into a chatbot, and we will not pretend otherwise. For this industry, the risk arrives by a different road, and it is one we have already documented.

A real estate closing moves life-changing sums on emailed instructions, and the attack that works there is impersonation: a convincing email inside a real deal, redirecting a wire. We broke down the full numbers in our July piece on wire fraud at the closing table, including the FBI figure that reported real estate fraud losses hit 275 million dollars in 2025, up nearly 60 percent in a year. What makes those impersonation emails convincing is knowledge: deal details, party names, timing, amounts, the texture of a real transaction.

Now connect the two halves. Every paste into an unmanaged AI account is a copy of exactly that knowledge, sitting in a place your firm cannot see, behind a personal password your firm cannot reset, in accounts that criminals actively harvest. The loss, when it comes, will not look like an AI incident. It will look like a diverted closing, and the client whose file leaked will never know which paste mattered. In a business where trust is the entire product, that is the exposure that counts.

Visibility comes before policy

You cannot enforce a confidentiality duty, run a Safeguards program, or write a truthful AI policy around tools you have not found. So the first move is not a memo. It is an inventory.

Find every AI tool, browser extension, and AI agent on the machines that touch transaction files, and note which account each one is signed into, company or personal, because those are different worlds. Then set one rule that removes the judgment call: nothing from a client file, a pre-approval, a settlement statement, or a wire instruction goes into an AI tool that is not on the approved list, and summarizing or rewriting counts as going in. Then give people an approved path, because agents adopted these tools for a reason, and a ban with no alternative just teaches a busy team to hide the shortcut.

Where we fit, and where we do not

The boundaries first, same as always. We are not lawyers, and what your license or the Safeguards Rule requires of your specific operation is a question for counsel. We do not write your wire-verification policy, verify seller identities, or run title searches, and the July piece says the same.

What we run is the layer under all of it. Our Managed AI Security service starts with a free AI Discovery: a light install, about a week of quiet observation, then a report of every AI tool, extension, and agent in use across your machines, including which are running on personal accounts, risk ranked in plain English. Nothing changes for your team while it runs, and the report is yours whatever you do next. From there we enforce the tool list you approve and keep watching as new AI shows up. Alongside it we run managed email security, endpoint detection, and security awareness training for brokerages and title firms, the layer that catches the impersonation email the leaked file makes possible. None of it guarantees compliance or makes fraud impossible, and no honest vendor would say otherwise. It gives you the one thing every duty above quietly assumes: knowing where your clients' information actually goes.

The question worth asking this week

Not "do our agents use AI." At 82 percent adoption, they do. Ask instead: could anyone in your office list, today, every AI tool that has touched a client's financial file this month, and which account each one was signed into?

We work with real estate and title firms nationwide from our home base in McLean, Virginia. If you run a brokerage or settlement operation in Washington DC, Northern Virginia, Maryland, or anywhere in the country and you want that list to exist, book a free 15-minute call. The discovery that produces it is free, and the answer is yours either way.