Security & access
Information about people's homes, handled deliberately
Water Risk Register holds incident histories, contractor reports and claims data. Access is granted on purpose, time-limited, and logged.
Role-based access
Leaseholders, block managers, brokers and administrators each sign in to their own workspace. The role decides which records load at all — not just which buttons are visible.
Permissioned broker grants
A broker can only open a block where an active, dated access grant exists. Grants record who approved them, their scope and their expiry, and can be revoked instantly.
Private document storage
Surveys, invoices and photographs are held in private storage and served through short-lived links issued only after permission is re-checked for the requester.
Append-only audit trail
Views of restricted material, downloads, exports, edits and access changes are all written to an audit trail with the actor, the record and the time.
Aggregate by default
Block-level views show counts, causes, severity and scores. Flat-level detail is exposed only where unit-level access has been explicitly granted.
Enforced in the database
Access rules are applied by row-level security in the database, so the same restrictions hold for every screen, export and report.
Data protection
Data is processed in the United Kingdom on managed infrastructure with encryption in transit and at rest. Records are amended and superseded rather than silently erased, so the history of a property remains intelligible, while personal account data can be corrected by the account holder at any time. Full detail is in our privacy and data use statement.
Ask a security question