Security
A property record holds addresses, documents and the people who work on a building, so it needs to be handled with care. This page describes, in plain terms, the measures in place today.
What is in place today
Private files
Uploaded documents and photos are stored privately. They are not public by default, and a file is only opened through a short-lived link created after we have checked that you are allowed to see it.
Access only for people you choose
A property can only be seen by the people who have been given access to it. Access is checked on our servers and again in the database, not just hidden in the page.
Limited contractor access
You decide whether a contractor can read or add records, can be limited to particular rooms and when their access ends.
QR codes are not public links
Scanning a property QR code takes a signed-in, authorised person to that property’s record. It does not make the record public.
Secure connections
The site is served over HTTPS, and browsers are told to use HTTPS only. It also tells browsers not to let other sites embed it inside a page.
Records of important actions
Important actions on an account or property are recorded, which helps us investigate if something goes wrong.
Controlled uploads
Uploads are limited to common document and image types and a maximum file size.
Payments handled by Stripe
Card payments are processed by Stripe. We do not receive or store your full card details.
Careful error monitoring
Where error monitoring is enabled, we remove web address query strings, cookies and request contents before anything is sent.
The service providers we use for sign-in, storage, hosting, payments and email are listed in the Privacy Policy.
How you can help protect your records
- Use a strong password that you do not use for other services, and keep it private.
- Only give people access to the properties they need, and remove contractor access when the work is finished.
- Never email passwords or card numbers to anyone, including us.
- Tell us straight away if you think your account has been misused.
Report a security concern
If you find a possible security problem, please email support@mypropertyrecord.co.uk with the word “security” in the subject. Please give us a reasonable chance to look into it before sharing details publicly.