Security & Governance
Our approach to operational security, data governance, and responsible infrastructure practices. Security is foundational to how we build and operate.
Our security philosophy
Security isn't a feature we add—it's foundational to how we design, build, and operate systems. We approach security through governance: establishing clear policies, implementing appropriate controls, and maintaining ongoing vigilance.
Rather than claiming certifications we don't hold, we focus on implementing sound security practices appropriate to our operations and continuously improving our posture. Transparency about our approach is more valuable than overclaiming.
For clients with specific compliance requirements, we work to understand their needs and implement appropriate controls within our engagement scope.
Our Commitment
- Honest representation of our security posture
- Appropriate controls for the systems we build
- Clear documentation of security practices
- Responsive handling of security concerns
- Continuous improvement of our approach
- Transparency with clients about capabilities
Security principles
The foundational principles that guide our security practices.
Access Governance
Role-based access controls and principle of least privilege across all systems and operations.
Operational Visibility
Comprehensive logging and monitoring to maintain awareness of system activities and potential issues.
Policy Documentation
Clear, documented security policies and procedures that guide operational decision-making.
Infrastructure Security
Secure infrastructure practices including encryption, network segmentation, and regular assessments.
Team Awareness
Ongoing security awareness and training to ensure responsible handling of sensitive information.
Incident Readiness
Documented incident response procedures to address security events quickly and effectively.
Operational practices
The specific practices we implement across our operations.
Data Protection
- Encryption at rest and in transit
- Regular backup procedures
- Data classification frameworks
- Retention and disposal policies
Access Management
- Multi-factor authentication
- Role-based access controls
- Regular access reviews
- Privileged access management
Operational Security
- Secure development practices
- Vulnerability management
- Change management procedures
- Third-party risk assessment
Governance
- Security policy framework
- Risk assessment processes
- Compliance monitoring
- Continuous improvement
Product security
Security considerations for our products.
Dwella
Our property management platform implements security controls appropriate for handling tenant and property data.
- Encrypted data storage
- Secure authentication
- Role-based access
- Audit logging
Client Engagements
For client projects, we implement security controls based on engagement requirements and client specifications.
- Requirement-based controls
- Client security alignment
- Documentation provided
- Handover procedures
Security questions?
If you have questions about our security practices or need to discuss specific requirements for your engagement, we're happy to provide more detail.