PropertyGuard AI
Security
Last updated 24 Sept 2026
How we protect your records, and how to report a security problem to us.
Draft for review. This page is a starting template prepared for PropertyGuard. It must be checked and completed by a qualified solicitor before launch and is not legal advice.
How your data is protected
- Isolated accounts. Every record is protected by database-level access rules, so one account can never read or change another’s data — even if a request is crafted by hand.
- Private files. Photos, documents and receipts are stored privately and only opened through short-lived signed links.
- Secrets stay on the server. Payment, AI and database administration keys are never sent to your browser or phone.
- Payments through Stripe. Card details are entered on Stripe’s pages; we never see or store card numbers.
- Encrypted connections (HTTPS with HSTS), a strict Content Security Policy, and secure storage (Keychain / Keystore) for sessions in the mobile apps.
- Abuse protection. Sign-in, password reset, AI and billing requests are rate limited, and plan limits are enforced by the database.
Report a vulnerability
If you think you have found a security problem, please email info@brilliantbeaconservices.co.uk with the details and steps to reproduce it. Please do not access other people’s data, disrupt the service or share the issue publicly until we have fixed it. We will acknowledge your report within 3 working days and keep you updated.
Our machine-readable contact details are in security.txt.