Trust
Where your tenants’ data lives.
You are handing us the names, addresses and signed agreements of the people renting your apartments.
One organisation cannot see another
Isolation is enforced in the data layer on every query, not by a filter in the UI. An organisation slug that is not yours returns a 404, so it does not even reveal that another operator exists.
Documents are not public URLs
Leases, signature images and assistant attachments are never servable by link. What may be served publicly is defined in one place, and the file route, the URL builder and the storage driver each enforce it on their own.
Everything is attributed
Who changed what and when, kept as an audit trail you can read. The log of every automated email is never pruned, because “did we send that?” gets asked about last year.
Export always works
Reservations, contracts and signing evidence, exported to a file whenever you want. Your data stays exportable for 90 days after an account closes.
GDPR
You are the controller. We are the processor.
Your tenants’ personal data is yours. We process it on your instructions and for no other purpose. We do not sell it, mine it or train anything on it.
That relationship is written down in a data processing agreement you can read before you sign anything. The third parties involved are named on the sub-processors page, and a new one is added there before it goes into production.
Certifications
What we do not have yet
We have no SOC 2, no ISO 27001 and no penetration test report to send you. If your procurement process requires one, we are not yet a company you can buy from. Better to learn that here than after four meetings.
What we do have is a small, readable system with the isolation and audit properties above, run by the people who wrote it. Ask us anything specific at james@quarters.live and you will get a straight answer.
Reporting a vulnerability
We will not send lawyers.
Write to james@quarters.live with what you found and how to reproduce it. We aim to acknowledge within two working days and to fix anything serious first. Test against your own trial account, leave other people’s data alone, and we have no complaint with you.
Show us how you work
One call. You leave knowing what your own system would look like, and what it would cost.
See your own system before you pay