The answers your IT team will ask for.

Section 01How to do it

1. 01

   Establish who can see what

   Each customer’s account is kept separate. Inside an account, access is by role: owner, manager or inspector. Clients see only their own properties, through a portal with its own login.

2. 02

   Turn on two-factor for everyone

   Two-factor authentication is on every plan, for your team and for portal users. The owner can require it for everyone. Trusted devices make repeat sign-ins easy, and one action signs out your other devices.

3. 03

   Settle the hosting question

   We are a UK company and the infrastructure runs in EU regions. Does your policy need a named region, a data residency promise or anything in writing? Ask before you roll out, and we will confirm what applies.

4. 04

   Check the audit trail yourself

   Activity keeps a trail of record changes, day by day, beside every email the system has sent and when each client last signed in to their portal. Each teammate has their own history. It exports as CSV.

5. 05

   Install nothing

   A browser. No agent, no MDM package, no desktop installer. Normal HTTPS access is the whole requirement, and updates need no rollout.

6. 06

   Agree the exit before you need it

   Reports download as PDFs. An owner can take a full download of the records as CSV files, with no request process. Account deletion is available in the app.

Section 02What the app actually does here

• Two-factor authentication is available on every plan, by authenticator app or email code
• Eight single-use recovery codes are issued, and can be made again
• Trusted devices can be remembered, and all of them forgotten in one action
• Sign out other devices from Security, in one action
• Sessions run on idle time: you stay signed in while you work, and are signed out after a spell without use
• An owner can require two-factor authentication for everyone in the account
• The Activity page shows record changes day by day, every email sent and when each client last signed in to their portal. Each teammate has their own history, and it exports as CSV
• Client portal users have their own separate two-factor authentication
• Account deletion waits 30 days before anything is destroyed

Section 03What goes wrong

Every one of these has cost somebody real time. They are cheap to avoid and expensive to unwind.

Section 04Questions

Section 05Related