This page explains how we protect your organisation’s data and your residents’ data across the ResidentLink 360 platform.
Our approach
Block managers trust ResidentLink 360 with records about buildings, residents, contractors and physical access. Security is built into how we design, build and run the platform, not added afterwards.
Encryption
- All data is encrypted in transit with TLS 1.2+ (TLS 1.3 where supported).
- Data at rest, including databases, file storage and backups, is encrypted with AES-256.
- Encryption keys are managed by a dedicated key management service with strict access policies.
Access control
- Role-based permissions let you decide exactly what each staff member, contractor and resident can see and do.
- Every key, fob and record change is written to a tamper-evident audit trail.
- Our own staff get the minimum production access they need, protected by multi-factor authentication, and all access is logged.
Hosting and availability
The platform is hosted on Amazon Web Services in UK and EU regions, across multiple availability zones. We commit to 99.9% uptime, with automated daily backups, point-in-time recovery and regularly tested disaster recovery plans.
GDPR and data protection
We are built for UK and EU GDPR. We offer a data processing agreement to every customer, support data subject requests through the platform, and apply configurable retention policies. See our Privacy Policy for details.
Secure development
- Code is peer reviewed and automatically scanned for vulnerabilities before release.
- Dependencies are monitored and patched continuously.
- Independent penetration tests are carried out at least once a year.
Incident response
We monitor the platform around the clock. If an incident affects your data, we will notify you without undue delay, and within the timescales set by GDPR, with clear information about what happened and what we are doing about it.
Responsible disclosure
If you believe you have found a security vulnerability, please email rizwanchand@msn.com. We will acknowledge your report, keep you informed and will not take action against good-faith research.