Security

Property managers trust us with residents' contact details, photos of their homes and access notes. Here is how we protect them.

Infrastructure

• Hosted on major cloud platforms with encryption in transit (TLS) and at rest.
• No long-lived cloud keys: our servers get short-lived credentials through workload identity federation.
• Photos and invoices are private files, shown through links that expire.
• Credentials you connect (such as a property management system API key) are encrypted with a separate key.

Access

• Passwordless sign-in with one-time codes that expire in 15 minutes and lock after repeated wrong attempts.
• Approval links are signed, tied to one ticket, and expire after 7 days.
• Resident phone numbers and access codes are shared only with the vendor who gets the job.
• Rate limits protect every public endpoint.

AI

• Our AI providers do not train their models on your data.
• Spending needs a human: a manager or owner approves every non-emergency repair, and emergency dispatch uses the not-to-exceed limit you set.
• The assistant only suggests simple, low-risk troubleshooting steps and escalates danger signs immediately.

Report a problem

Found a security issue? Please tell us through the support form. We reply within one business day.