Security and data protection
A property portfolio is commercially sensitive and contains personal data. The architecture is designed accordingly.
Isolation per organisation
Every record carries the organisation it belongs to, and access is enforced at the database level rather than only in the application. A query that omits the organisation returns nothing, never another organisation’s data.
Access control
- Role-based access with organisation, office and team scopes.
- Separate, narrower scopes for owner, tenant and vendor access.
- Single sign-on and enforced two-factor authentication on enterprise plans.
- Append-only audit logs on sensitive changes.
Data location and retention
- Hosting and file storage in the European Union.
- Encryption in transit and at rest.
- Documented retention and deletion on contract termination.
- Data export on request, in a structured format.
Artificial intelligence
The AI layer runs under the permissions of the user asking, and it can be disabled for an organisation.
Reporting a vulnerability
Send findings to [email protected]. We acknowledge within two business days and keep the reporter informed until the issue is closed.
A demo on your own portfolio
The demo runs on a structure that matches yours: unit count, mandate model and portals. Forty-five minutes, no slide deck.