Security and data handling

Property records should stay in the right hands.

Tenovra is built around authenticated workspaces, organisation-level access boundaries and private evidence storage. This page describes controls in the current application; it is not a security certification.

Security controls in the product

These controls are designed into the application and database. Your organisation remains responsible for assigning suitable access and handling its records appropriately.

Authenticated access

Workspace features use account authentication and server-side access checks.

Organisation separation

Tenant-owned records carry an organisation identifier and database row-level security policies.

Private evidence storage

Property evidence is kept in private object storage and retrieved through authorised application flows.

Recorded activity

Important operational changes can be followed through recorded audit history.

Human-controlled workflows

Drafts and reminders do not independently approve spend, book work or make compliance certifications.

Tenovra does not claim SOC 2, ISO 27001 or other independent certification.