Privacy and data use
Water Risk Register holds sensitive information about people's homes. Access is granted deliberately, never by default.
Leaseholders control their own records
A leaseholder sees only the flats they are a verified member of. Records, documents and evidence uploaded for a flat are private to that flat's verified members and to platform administrators carrying out verification and data-quality work.
Brokers see blocks, not private lives
A broker firm can only view a block where an active access grant exists. By default that access is aggregated: incident counts, severity mix, causes, outstanding defects and block-level scores, without identifying individual occupants. Flat-level detail is available only where unit-level access has been explicitly granted, and only for documents marked as visible to brokers.
Access is time-limited and revocable
Every grant records who approved it, its scope, and when it expires. Access can be revoked at any time, and expired grants stop working automatically.
Everything sensitive is logged
Views of restricted material, document downloads, exports, edits and changes to access are written to an append-only audit trail with the actor, the record and the time.
Files are never public
Uploaded reports, invoices and photographs are held in private storage. They are served only through short-lived links issued after permission has been re-checked for the person requesting them.
Corrections rather than deletions
Records are amended and superseded rather than silently erased, so the history of a property remains intelligible. Personal account data can be corrected by the account holder at any time.
Questions about data use can be sent to info@brmsolutions.co.uk. This is a demonstration platform and contains fictional data.