Security
What we actually operate.
This page describes controls that are implemented, not aspirations. PropTrova isolates each workspace, applies role-based access, encrypts data in transit and at rest, records consequential administrative actions, and requires a named person to release final diligence.
Implemented controls
In place today
- Workspace isolation: every record belongs to one workspace, and access is enforced at the data layer rather than only in the interface.
- Role-based access control, with more than one administrator permitted and the final administrator protected from removal.
- Authentication by email and password or Google, with password reset under the account holder's control.
- Encryption in transit and at rest for stored records and documents.
- An activity record of consequential actions — access decisions, role changes, confirmations, adjustments and releases — readable by administrators.
- Human-controlled release: no final diligence is published by the system alone.
Handling of your material
Documents and uploads
Documents you provide are retained as originals under custody and are never altered. Extraction happens alongside the original, so the source can always be compared with what was read from it. Material belonging to one workspace is not used to answer another workspace’s questions.
What this does not do
Stated limits
PropTrova does not currently hold a third-party security certification, and this page makes no such claim. If your organisation requires a specific attestation, tell us when you request access and we will say plainly where we stand.
See what PropTrova can establish about an opportunity.
Access is granted to working commercial real estate teams while the design-partner programme is under way.