Sector Analysis · Real Estate & Construction

Small Estates, Very Large Transactions

This sector has the smallest technology estates in the series and the largest individual transactions. A closing-day failure jeopardises a deal worth more than the entire annual IT budget.

01 — The SignalA different argument entirely

Every other sector in this series argues from scale — millions of transactions, thousands of services, incidents measured per week. Real estate and construction argue from the opposite direction, and the case is stronger for it.

US construction spending runs to roughly $2.5 trillion, and real estate contributes around 17% of GDP including imputed rent. But the technology estates are small, the incident counts are low, and the digital maturity is the lowest of the ten. What makes reliability matter here is not volume. It is that individual transactions are enormous, infrequent, and time-bound.

02 — The MechanismDeadlines that cannot slip

A mortgage origination has a rate lock with an expiry. A closing has a date with lawyers, funds and counterparties assembled around it. A construction milestone has a contractual liquidated-damages clause. A bid has a submission deadline measured to the minute.

None of these move because a system was unavailable. A closing-day failure does not delay revenue — it re-prices a loan, forfeits a deposit, or triggers a penalty.

Low transaction volume does not mean low stakes. It means every transaction is individually significant, and the loss from one is not averaged away by the others.

The second pattern is field connectivity. Construction systems must work offline and reconcile later, and reconciliation failures are discovered late — often after a week of field data turns out to be missing. Property and facilities systems have a third: building management has physical consequences, and an access-control failure is an emergency rather than a ticket.

03 — The CostWhere it actually lands

04 — The AI StakesA thin estate meets a cheap attacker

This sector’s exposure is disproportionate to its technology spend. Real estate transactions are a long-standing target for business email compromise and wire fraud, and the economics of that attack have improved dramatically for the attacker: convincing impersonation of a lawyer, agent or title company is now cheap to produce at quality.

The defensive problem is that these organisations rarely have the security operations capability of a bank while moving comparable sums. Lean IT means fewer people to notice, and the transaction cadence means an anomaly has no strong baseline to stand out against.

Construction adds an operational-technology dimension as building systems and site equipment become connected — typically without the security practice that industrial operators have built up over decades.

05 — The RemedyProportionate, and aimed at the transaction

• Instrument the transaction path first. Origination, closing, bid submission, milestone reporting. Not the whole estate — the paths where a failure has a contractual consequence.
• Set SLOs against deadlines, not uptime. The objective is that the closing completes, not that the server was available.
• Make absent sync a breach. Throughput SLOs on reconciliation pipelines so missing field data alerts within hours rather than being discovered in a fortnight.
• Guardrail anything physical. Access control and building systems should escalate to a human by policy.
• Accept that automated investigation substitutes for headcount here. With lean IT, the constraint is investigation capacity, not detection — which is precisely the profile where automation returns most.

06 — In PracticeHosted, or customized for your estate

Hosted on Thalamus AI Cloud

This is the sector where hosted is almost always the right answer. There is rarely a regulatory reason to self-host, the estates are small enough that a managed instance covers them comfortably, and — decisively — these organisations do not have the platform engineering capacity to run observability infrastructure themselves. An instance provisions in minutes and needs no dedicated team to keep it running, which is the only model that survives contact with a fifteen-person IT function.

Customized for your enterprise

Larger brokerages and construction firms with managed-services obligations to clients sometimes need more. Customization typically means: per-client tenancy for facilities managers running other companies’ buildings, with signed webhooks delivering correlated problems into each client’s own process; SLO templates expressed as transaction-path objectives rather than service ones; and collectors positioned to handle intermittent field connectivity with local buffering and later reconciliation.

07 — Getting ThereHow Thalamus Advisory helps