Security & trust
Built to hold other people's money and homes.
This page is maintained by the Occupello team to answer common security and privacy questions. It describes the controls in place today; security is a shared responsibility between our platform, account owners, and their team members.
Encryption in transit & at rest
All traffic is served over TLS, and data is encrypted at rest by our cloud database provider.
Scoped access controls
Row-level security ensures members only see the workspaces and records they're entitled to. Roles are enforced server-side, never in the browser.
Managed, monitored hosting
The application runs on managed edge infrastructure with our database hosted by a SOC 2-compliant provider.
Audit-friendly records
Payments, maintenance actions, and account changes are recorded so operators can reconstruct what happened and when.
Responsible disclosure
Found something? Email our security contact and we'll acknowledge promptly. We don't pursue good-faith researchers.
Your data is yours
Export your records anytime. We don't sell data, and we delete it on request when you close your account.
Have a security question?
Reach our security contact for vulnerability reports, data-processing questions, or vendor due diligence.