Security, the honest version.
Nobody can promise perfect security, and anyone who does isn’t being straight with you. What we do: make it hard to get in, keep every company apart, notice problems within minutes, and recover from a backup that’s been checked.
Your own copy. Nobody else’s data beside it.
Each company runs on a copy of eaven of its own, with its own database, files, backups and address, kept in Canada, so one company’s problem stays with that company.
Who sees what
Every page was checked as a stranger, a tenant, staff and an administrator would see it.
- Tenants see only their ownTheir requests, papers, leases and receipts. Anything else answers “not found”.
- Office-only papers stay office-onlyHidden from the tenant on the page, in search and from their questions.
- Sensitive complaintsReach administrators only, including in search and exports.
- Contractors see one jobNo tenant’s name or contact details, and the link stops working when the job is done or after 120 days.
Signing in
The way the standards bodies say to do it, not the way that’s easiest.
- Two-step sign-inRequired for administrators and staff, with any authenticator app and one-time recovery codes.
- PasswordsNever stored, only hashed with PBKDF2-SHA256 at 600,000 rounds, each with its own salt. Common and guessable ones are refused.
- Guessing is limitedWrong passwords are counted per person, account and address before they’re checked.
- Sessions endAdministrators are signed out after 2 hours idle or 12 hours in all. Reset links last 2 hours and work once.
The pages and files
Closed to the usual ways in.
- Only over HTTPSWith strict transport security, and cookies that can’t be read by scripts or sent from other sites.
- A strict content policyNo scripts from anywhere else, every value escaped, every form protected against forgery.
- Files checked by what they areNot by their name. Web pages and scripts are refused, and files are kept outside the website with random names.
- Documents open in the portalIn its own viewer, so papers don’t pile up in downloads folders.
Backups and alerts
So a bad day stays a small one.
- Backed up every dayEach backup is checked before it’s kept, and restoring is practised on a test copy.
- Watched every minuteA health check covers the database, disk, the agent and backups.
- Alerts that reach someoneIf the agent stops, disk runs low or backups stop, an alert goes out within minutes.
- Everything loggedEvery change, by a person or by the agent, with who and when.
Privacy.
- Whose data is it?
- Yours. You’re the landlord; we look after your tenants’ information on your behalf, under a data agreement with your company and Canada’s privacy law, PIPEDA.
- Where is it kept?
- On servers in Canada, in your own copy.
- Do you sell it or use it for anything else?
- No. No advertising, no selling, and nothing of yours is used to train anything.
- What goes to a language model?
- Only what you type in the agent box, once an administrator turns Claude on: your words, with names, emails and phone numbers taken out. Tenants’ messages and records, photos of homes, parking maps and floor plans never go to it. How it works
- What happens when someone moves out?
- They keep their portal for 60 days, are sent what’s on file for them, and unsuccessful applications are deleted after the period you set.
Still ahead.
What we’re doing before we take on more companies, so you can hold us to it.
- An independent penetration test, by a firm that does nothing else
- Encrypted copies of every company’s backups, kept off-site
- A public status page
Found a weakness?
Please tell us through the contact form, and give us a chance to fix it before telling anyone else. We’ll reply and keep you posted.
See it run on your own buildings.
A 30-minute call with your questions, on a practice copy with made-up data, or on your own export if you’d like.