Scoped access
Accounts belong to an organization, with property-level access and action permissions. Records custody is separately delegated by the organization owner rather than granted to every manager.
SECURITY & DATA
Properties depend on accurate work records. ReadyTrak is being developed to control who can access them, preserve useful context, and make meaningful changes accountable.
Read our nine principlesIN THE APPLICATION
These reflect controls present in the application; they are not a claim of independent security certification.
Accounts belong to an organization, with property-level access and action permissions. Records custody is separately delegated by the organization owner rather than granted to every manager.
Passwords are checked against one-way password hashes rather than stored as readable passwords. Core write actions use request validation and form protections.
ReadyTrak product-support conversations are separate from a property's maintenance tickets, with access checks on ticket details and attachments.
Supported turn, stage, inventory-catalog, and maintenance-ticket changes have accountable revisions and guarded restoration. Inspection answers and template changes retain revisions, but restoration is not universal.
Turn, stage, Punch checklist, inspection, and maintenance-ticket photos are served through permission-checked application routes rather than a public photo directory.
Authorized management company and property-work exports require a fresh password confirmation. Archives include checksums and a download receipt; background ZIPs are downloadable for 24 hours after preparation and then removed through scheduled cleanup. Customers should independently verify and retain their own copies.
OPERATIONS & RECOVERY
Transport uses HTTPS on the public site. Backup schedule, off-site storage, legally applicable retention requirements, backup encryption, restore testing, and contractual security requirements depend on the actual deployed environment and should be confirmed directly rather than assumed from a feature list.
Ask a security questionWe do not advertise a fixed recovery time, independently audited compliance certification, or an encrypted-backup guarantee without verification. Security is an ongoing operational responsibility.
STILL BEING BUILT
Tell us what your policy, procurement, or IT team needs to know.