XML 41 R27.htm IDEA: XBRL DOCUMENT
v3.25.3

Cybersecurity Risk Management and Strategy Disclosure | 12 Months Ended
--- | ---
Sep. 30, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items] |
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | We maintain a cybersecurity program designed to detect, identify, classify and mitigate cybersecurity and other data security threats as part of our efforts to protect and maintain the confidentiality and security of homebuyer, customer, employee, vendor and supplier information, and non-public information about the Company, which has been strategically integrated into our enterprise risk management program to promote a company-wide culture of cyber risk awareness and inform our decision-making proce ss. The foundation of our cybersecurity program is based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework, which includes a set of controls to prevent, detect, and respond to cybersecurity and other data security threats and incidents. Additionally, in furtherance of detecting, identifying, and managing material cybersecurity and other data security threats, including such threats associated with our use of any third-party service providers, we also: •maintain robust information security and privacy policies that are reviewed and updated on an annual basis; •engage with a range of third-party service providers, includi ng cybersecurity consultants, to evaluate, monitor, and test our cyber management systems and related risks; •conduct audits, penetration tests, threat and vulnerability assessments, cybersecurity risk monitoring, and security enhancement consultations, using both internal and external resources; •maintain and continue to evolve our Cybersecurity Incident Management program, which includes regular incident respon se tabletop exercises, cybersecurity-related disaster recovery and business resiliency plans, and related communications and business continuity procedures; •conduct security assessments of third-party software products and hosting providers prior to engagement; •implement ongoing monitoring procedures for third-party service providers’ hosted applications to ensure continued alignment with our cybersecurity standards and compliance requirements; •provide mandatory annual security and privacy awareness training, along with monthly phishing simulations, to all of our employees. These trainings and simulations are designed to ensure employees are well-versed in the behaviors and requirements necessary to safeguard the Company's information resources; and •maintain cyber liability insurance to protect against the financial impact of a cyber incident. We have a dedicated team of employees managing our cybersecurity program and initiatives, led by the Company’s Chief Information Security Officer (CISO), who reports to our Chief Information Officer (CIO). Both our CISO and CIO possess over 20 years of experience in senior leadership roles leading information security and technology teams across private and public companies. The team works directly in consultation with internal and external advisors to execute our cybersecurity and risk strategies. Pursuant to our cybersecurity program, potential cybersecurity threats are classified by risk levels and threat mitigation efforts are typically prioritized based on those risk classifications, while focus also remains on maintaining the resiliency of our information systems. In the event we identify a potential cybersecurity issue, we have defined procedures for responding to such issues, including procedures that address when and how to engage with Company management, the Board of Directors, other stakeholders and law enforcement. Our Board of Directors has ultimate oversight responsibility for risks relating to our cybersecurity program. In addition, the Audit Committee assists the Board of Directors in monitoring our cybersecurity and data security risk exposures and compliance with the Company’s cybersecurity program, and regularly makes inquiries of the Company’s management team, internal auditors and independent auditors regarding these risk exposures and compliance matters. We have also established a Technology Committee, which is a committee currently comprised of four members of the Board of Directors. The Technology Committee is responsible for advising and assisting the Board of Directors in overseeing the Company’s technology strategy and investment matters, and regularly meets with the Company’s management team with respect to these initiatives. Conducting our businesses involves the collection, storage, use, disclosure, processing, transfer, and other handling of a wide variety of information, including personally identifiable information, for various purposes. Like other companies that process a wide variety of information, our information technology systems, networks and infrastructure and technology have been, and may in the future be, vulnerable to cybersecurity attacks and other data security threats. These types of attacks are constantly evolving, may be difficult to detect quickly, and often are not recognized until after they have been launched against a target. While, to date, we do not believe we have had a significant cybersecurity breach or attack that has had or is likely to have a material impact on our business strategy, results of operations, or financial condition, there can be no assurance that our efforts to maintain the security and integrity of these types of IT networks and related systems will be effective or that attempted security breaches or disruptions would not be successful or damaging. For more information about these and other cybersecurity risks faced by us, see Part 1. Item 1A. “Risk Factors.”
Cybersecurity Risk Management Processes Integrated [Flag] | true
Cybersecurity Risk Management Processes Integrated [Text Block] | We maintain a cybersecurity program designed to detect, identify, classify and mitigate cybersecurity and other data security threats as part of our efforts to protect and maintain the confidentiality and security of homebuyer, customer, employee, vendor and supplier information, and non-public information about the Company, which has been strategically integrated into our enterprise risk management program to promote a company-wide culture of cyber risk awareness and inform our decision-making proce ss. The foundation of our cybersecurity program is based on the National Institute of Standards and Technology (NIST) Cybersecurity Framework, which includes a set of controls to prevent, detect, and respond to cybersecurity and other data security threats and incidents.
Cybersecurity Risk Management Third Party Engaged [Flag] | true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | false
Cybersecurity Risk Board of Directors Oversight [Text Block] | Our Board of Directors has ultimate oversight responsibility for risks relating to our cybersecurity program. In addition, the Audit Committee assists the Board of Directors in monitoring our cybersecurity and data security risk exposures and compliance with the Company’s cybersecurity program, and regularly makes inquiries of the Company’s management team, internal auditors and independent auditors regarding these risk exposures and compliance matters. We have also established a Technology Committee, which is a committee currently comprised of four members of the Board of Directors. The Technology Committee is responsible for advising and assisting the Board of Directors in overseeing the Company’s technology strategy and investment matters, and regularly meets with the Company’s management team with respect to these initiatives.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | We have a dedicated team of employees managing our cybersecurity program and initiatives, led by the Company’s Chief Information Security Officer (CISO), who reports to our Chief Information Officer (CIO). Both our CISO and CIO possess over 20 years of experience in senior leadership roles leading information security and technology teams across private and public companies. The team works directly in consultation with internal and external advisors to execute our cybersecurity and risk strategies.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | We have a dedicated team of employees managing our cybersecurity program and initiatives, led by the Company’s Chief Information Security Officer (CISO), who reports to our Chief Information Officer (CIO). Both our CISO and CIO possess over 20 years of experience in senior leadership roles leading information security and technology teams across private and public companies. The team works directly in consultation with internal and external advisors to execute our cybersecurity and risk strategies. Pursuant to our cybersecurity program, potential cybersecurity threats are classified by risk levels and threat mitigation efforts are typically prioritized based on those risk classifications, while focus also remains on maintaining the resiliency of our information systems. In the event we identify a potential cybersecurity issue, we have defined procedures for responding to such issues, including procedures that address when and how to engage with Company management, the Board of Directors, other stakeholders and law enforcement. Our Board of Directors has ultimate oversight responsibility for risks relating to our cybersecurity program. In addition, the Audit Committee assists the Board of Directors in monitoring our cybersecurity and data security risk exposures and compliance with the Company’s cybersecurity program, and regularly makes inquiries of the Company’s management team, internal auditors and independent auditors regarding these risk exposures and compliance matters. We have also established a Technology Committee, which is a committee currently comprised of four members of the Board of Directors. The Technology Committee is responsible for advising and assisting the Board of Directors in overseeing the Company’s technology strategy and investment matters, and regularly meets with the Company’s management team with respect to these initiatives.
Cybersecurity Risk Role of Management [Text Block] | We have a dedicated team of employees managing our cybersecurity program and initiatives, led by the Company’s Chief Information Security Officer (CISO), who reports to our Chief Information Officer (CIO). Both our CISO and CIO possess over 20 years of experience in senior leadership roles leading information security and technology teams across private and public companies. The team works directly in consultation with internal and external advisors to execute our cybersecurity and risk strategies. Pursuant to our cybersecurity program, potential cybersecurity threats are classified by risk levels and threat mitigation efforts are typically prioritized based on those risk classifications, while focus also remains on maintaining the resiliency of our information systems. In the event we identify a potential cybersecurity issue, we have defined procedures for responding to such issues, including procedures that address when and how to engage with Company management, the Board of Directors, other stakeholders and law enforcement. Our Board of Directors has ultimate oversight responsibility for risks relating to our cybersecurity program. In addition, the Audit Committee assists the Board of Directors in monitoring our cybersecurity and data security risk exposures and compliance with the Company’s cybersecurity program, and regularly makes inquiries of the Company’s management team, internal auditors and independent auditors regarding these risk exposures and compliance matters. We have also established a Technology Committee, which is a committee currently comprised of four members of the Board of Directors. The Technology Committee is responsible for advising and assisting the Board of Directors in overseeing the Company’s technology strategy and investment matters, and regularly meets with the Company’s management team with respect to these initiatives.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | We have a dedicated team of employees managing our cybersecurity program and initiatives, led by the Company’s Chief Information Security Officer (CISO), who reports to our Chief Information Officer (CIO). Both our CISO and CIO possess over 20 years of experience in senior leadership roles leading information security and technology teams across private and public companies.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | our Chief Information Officer (CIO). Both our CISO and CIO possess over 20 years of experience in senior leadership roles leading information security and technology teams across private and public companies
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | Pursuant to our cybersecurity program, potential cybersecurity threats are classified by risk levels and threat mitigation efforts are typically prioritized based on those risk classifications, while focus also remains on maintaining the resiliency of our information systems. In the event we identify a potential cybersecurity issue, we have defined procedures for responding to such issues, including procedures that address when and how to engage with Company management, the Board of Directors, other stakeholders and law enforcement.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] | true

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardOfDirectorsOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementExpertiseOfManagementResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleReportToBoardFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskManagementProcessesForAssessingIdentifyingAndManagingThreatsTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K + Details
Name: | cyd_CybersecurityRiskManagementStrategyAndGovernanceLineItems
Namespace Prefix: | cyd_
Data Type: | i:stringItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskManagementThirdPartyEngagedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskMateriallyAffectedOrReasonablyLikelyToMateriallyAffectRegistrantFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskProcessForInformingBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskProcessForInformingManagementOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskRoleOfManagementTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskThirdPartyOversightAndIdentificationProcessesFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration