Skip to content

Security and data

Your agency’s data never meets another agency’s.

Isolation is not an intention stated on a web page: it is enforced in the database, underneath the code, at the level where even a programming mistake cannot get around it.

Isolation at database level

Every business table carries the agency identifier and a row-level security policy. With no agency set, a query sees no rows at all — this is not an application filter someone can forget to write.

One source of truth

The API is the only process that talks to the database. No client — not the browser, not a mobile app — has direct access to the data. A compromised client does not open the database.

Hosted in Europe

The application's servers are in Germany and media storage sits in European jurisdiction. Your photos and your conversations don't cross the Atlantic to be filed away.

Nothing enters unvalidated

Every incoming payload — a third-party response, a network notification, an uploaded file, a query parameter — is validated before it exists in the code. What fails is logged as-is, then rejected.

Fine-grained permissions

Roles and permissions are set per action, not by broad tier. An external colleague can consult a record without seeing revenue: statistics are the only screen closed on read, because the screen is the sensitive data.

Public links are signed

A portal feed, a booking page, a public media file: each goes through a signed address, and booking links are time-limited. A link left lying in a mailbox does not open your portfolio.

Your data, and what we don’t do with it

  • No resale, no sharing for advertising, no profiling.
  • No model is trained on your conversations or on your properties.
  • Dates are stored in universal time and converted for display: an appointment does not shift when the clocks do.
  • Your data can be exported, and leaving is not negotiated against it.

A precise technical question?

Ask it in the meeting, or in writing — including to your data protection officer.

Book 20 minutesCall us

Twenty minutes over video, on your properties. No commitment, nothing to install.