Account-scoped data access
Every record — properties, units, tenants, leases, rent, expenses, mortgages, documents and contacts — is owned by the account that created it. Access rules are enforced in the database, so one account cannot read another account's rows.
Private document storage
Uploaded files are stored in a private bucket. They are never served from a public URL: viewing or downloading a file issues a short-lived signed link to the owner.
Connections and authentication
- Traffic is served over HTTPS.
- Sign-in is email and password, with password reset by email.
- Sessions are per-browser and can be ended by signing out.
What we do not claim
BRIQO does not currently hold third-party security certifications or audit reports. If that changes, it will be stated here with the issuing body and date rather than implied.