Security
Data Security Fact Sheet
Assurified is built for institutional rental housing owners and their advisors who handle sensitive insurance, financial, and property data. Security is foundational to the platform — not a feature layer.
Infrastructure & Hosting
- Hosted on enterprise-grade cloud infrastructure with SOC 2 Type II certified providers
- Data stored in US-based regions with geographic redundancy
- 99.9% uptime SLA with automated failover and health monitoring
- All infrastructure changes managed through version-controlled, audited pipelines
Encryption
- All data encrypted in transit using TLS 1.2+
- All data encrypted at rest using AES-256
- Encryption keys managed through a dedicated key management service
- Database backups encrypted with separate key rotation schedules
Access Controls
- Role-based access control (RBAC) enforced at the application and data layer
- Multi-factor authentication required for all internal platform access
- Least-privilege access model — employees access only data required for their role
- All access events logged and retained for audit review
Document & Data Handling
- Uploaded documents processed through an isolated ingestion pipeline
- Document data extracted and stored separate from source files
- Client data is logically isolated — no cross-tenant data access
- Data retention and deletion available per client agreement
Vulnerability Management
- Automated dependency scanning on every code change
- Regular third-party penetration testing
- Security patches applied on an accelerated schedule for critical CVEs
- Responsible disclosure policy in place for external researchers
Operational Security
- Incident response plan with defined RTO and RPO targets
- Security training required for all employees at onboarding and annually
- Vendor and third-party risk assessments for all integrations
- Business continuity and disaster recovery plan reviewed annually
Security Questions
Have a specific security requirement?
Prospective design partners and platform clients can request a detailed security review, architecture walkthrough, or questionnaire response. Contact us at security@assurified.com.