Security

Your Data Stays Yours

Rent rolls, tenant details, financials and investor capital are some of the most sensitive records a real estate firm holds. Security is built into how Stratios stores them, not added on top.

What Is in Place

Protection at Every Layer

Purpose-Built Security

Every record belongs to one organization, and the database itself refuses to show it to any other. Stratios connects with a login that can't skip that rule, so a mistake on one screen can't expose another company's data.

Your Data, Your Control

You decide what to upload and who can see it. Set how long conversations are kept, delete a document or an asset whenever you choose, and download your lists to Excel at any time.

No Model Training

Your data stays yours. Stratios doesn't use your documents, figures or conversations to train AI models, and our AI provider's commercial terms don't allow training on our customers' content.

Walls Between Assets

Limit each person to certain assets or funds, and the database enforces it. Roles set what each person can see and change, down to a single field, and the Portfolio Analyst works within the same permissions.

Encrypted Everywhere

Your data is encrypted as it travels with TLS, and the database refuses unencrypted connections. Stored data is encrypted with AES-256. Bank accounts are kept by their last four digits only.

A Clear Audit Trail

Changes, sign-ins and downloads are recorded as they happen, and your administrators can review them. Every field keeps its own history of who changed it, when, and from what.

Common Questions

Security Is Fundamental to Everything We Do

Stratios protects your data at every level, from who can sign in to what each person can see. Your rent rolls, tenant details, financials and investor records deserve nothing less.

What does Stratios consider my data?

Everything your organization puts into Stratios: the documents you upload or email in, the figures and records read from them or typed in, and your conversations with the Portfolio Analyst. All of it is protected the same way.

How does Stratios keep my data private and secure?

Stratios encrypts your data at rest and in transit, uses strict role-based access controls, and never trains AI models on it. Each organization's data is separated by the database itself, so it can't mix with another company's.

Where is my data hosted and processed?

Stratios runs on established cloud hosting providers, and outside services receive only what they need to do their job. We don't offer a choice of region yet. A list of the services we rely on is available on request.

How do you respect access controls for my data?

Administrators set what each role can see and change, down to a single field, and can limit each person to certain assets or funds. The database enforces those limits, and the Portfolio Analyst follows them too.

You decide what to upload, how long conversations are kept, and who in your company can see it.

How does Stratios ensure no one is training on my data?

Stratios doesn't train AI models on your data, and uses it only to process your requests. Our AI provider's commercial terms prohibit training on our customers' content. The provider deletes requests within 30 days, though it can keep them longer where needed to enforce its usage policy or comply with the law.

Can Stratios staff see my data?

Staff can open your organization only through a time-limited session that ends after two hours and is recorded in your Activity log. Your channels and direct messages are hidden from us unless an administrator allows it.

During our pilot, staff review conversations with the Portfolio Analyst so we can fix what it gets wrong.

How do you keep the wrong people out?

Sign-in runs on a specialist identity service, so Stratios never stores your password. Email addresses are verified, and colleagues join your organization only by invitation.

We review each new organization before its trial starts. Email from an unknown sender to an asset's address waits for your approval. Limits on requests and uploads slow down automated abuse, and browser security headers protect against common web attacks.