Security and service scope

Controls in this release

• Account identification through ChatGPT sign in. Property Command does not store passwords.
• Server side ownership checks on property, tenancy, rent and document requests.
• Document downloads require the owning account and are served as attachments.
• Upload type, size and content signature checks for supported file types.
• SHA256 document fingerprints recorded with upload events.
• Origin checks on browser requests that change data.
• Activity records for material changes and exports.
• Downloadable property backups with document integrity checks and restoration into a separate property copy.

Limits

File type checks are not malware scanning. No antivirus or independent penetration test certification is claimed. The current audit trail is an operational history, not a certified immutable evidence system. Keep original documents and independent backups. Email reminders are not active; use dashboard reminders or calendar export. AI extraction is not active.

Commercial release checks

Checkout session creation is verified. A completed customer payment, real cancellation, independent email recovery, hosting provider disaster recovery and independent security review have not yet been verified. This page is a statement of implemented controls and remaining limitations, not a claim of certification.

Customer backup restoration has passed an isolated recovery drill, including recovery after deletion, exact document bytes and account separation. A property archive supports up to 16 MB of documents. See Backups for its contents and limits.

Report a concern

Contact hello@propertycommand.co.uk with a description and the affected page. Do not include another person’s confidential documents or authentication credentials.