Platform Overview
A detailed breakdown of the Pilot operating system — capabilities, data architecture, integrations, and security model.
Tech Stack
Next.js 15 (App Router)
Server components, streaming, edge-ready API routes
Supabase (PostgreSQL)
Row Level Security, real-time subscriptions, auth
Stripe Connect
Rent collection, payouts, subscriptions, webhooks
Upstash Redis
Rate limiting, session caching, analytics aggregation
BunnyCDN
Document storage, lease PDFs, property photos
Resend
Transactional email — rent notices, invites, receipts
OpenRouter AI
AI lease analysis, maintenance triage, rent pricing
Data Flow
All financial transactions flow through Stripe Connect — Pilot never holds funds. Rent payments are collected from tenants and disbursed directly to landlord bank accounts, with Pilot taking a platform fee. Every transaction is recorded in the payment ledger for full audit history.
Integrations
Stripe Connect
Marketplace payments, ACH/card collection, instant payouts
Resend
Branded transactional email with delivery tracking
Upstash Redis
Sub-millisecond rate limiting and response caching
OpenRouter AI
GPT-4o-mini for lease analysis, triage, and insights
RentCast
Property valuations, rent estimates, market listings
Security Architecture
Row Level Security (RLS) on every Supabase table — users can only access their own data
Stripe webhook signature verification on all payment events
Rate limiting on all API routes via Upstash Redis (per-user sliding window)
Constant-time comparison for cron secrets to prevent timing attacks
GDPR/CCPA compliant data export at /api/user/export and account deletion
FHA/FCRA-safe AI scoring — no protected class data used in risk models
Zod validation on all API inputs — no raw user data reaches the database
HTTPS-only with Vercel edge network and automatic TLS
Subscription
Pilot
$249.99/moOne plan. Unlimited everything. No per-unit fees.
Compliance
Pilot is designed to be compliant with the Fair Housing Act (FHA) and Fair Credit Reporting Act (FCRA). AI-powered tenant risk scoring uses only payment behavior and lease history — no protected class characteristics (race, religion, national origin, sex, disability, familial status) are used in any scoring model. Users retain full rights to export and delete their data at any time.