Security and compliance you can verify
Propty is built for Dutch real-estate professionals working with sensitive data: rental agreements, financial transactions, tenant personal data and building documentation. This page shows how we protect that data - and how you can verify it yourself.
Certifications & standards
SOC 2 Type 2
Independent audit by an external accountant confirming that our security and reliability controls actually work in practice. Type 2 evaluates a longer period, not a single point in time.
ISO 27001:2022
Global standard for information security. Requires a documented management system and yearly external audits by an accredited certification body.
GDPR
European privacy law that Propty has been operating under since day one. Data processing agreements with all sub-processors, European hosting, and data-subject rights actively facilitated.
How we protect your data
Six principles behind every technical choice we make. No jargon, verifiable.
European hosting
All customer data is stored in German data centres (Hetzner, Falkenstein). No transfer outside the EEA without an EU-approved safeguard.
Encrypted in transit and at rest
TLS 1.3 for all traffic. AES-256 for the database and document storage. Backups are encrypted with a separate key.
Role-based access
Every team member has access only to what their role requires. Two-factor authentication is mandatory. Access is reviewed each quarter.
Never AI training on your data
Documents, contracts and tenant data are never used to train AI models. Not anonymously, not in aggregate.
Backups and recovery
Automated daily backups with a thirty-day retention window. Recovery drills twice per year with documented outcomes.
Data processing agreements with all sub-processors
From hosting to email delivery: every party that touches customer data has signed a GDPR-compliant data processing agreement. Overview available on request.
Company details
Propty is a trade name of Group any B.V., registered at Keizersgracht 520, 1017 EK Amsterdam, the Netherlands. Chamber of Commerce Amsterdam registration number 89946790.
Legal documents
Security or compliance question?
For security questions, data processing agreements or compliance documentation, reach us at [email protected]. Enterprise prospects who want to run a security review can submit their questionnaire to the same address.
Get in touchFound a vulnerability?
We appreciate responsible disclosure. Report a security issue to [email protected] with a detailed description. We acknowledge within 24 hours and work with you toward a fix before public disclosure.