You hold access to empty homes. Here's how we treat that.
An alarm code, an address and "owner away until April" are a dangerous combination. This page says what we do, and what we don't have yet.
Access information
Alarm codes, gate codes, lockbox details and key locations.
- Encrypted separately
- Stored apart from other property data and encrypted at the application level with AES-256-GCM, so a database copy alone doesn't reveal the codes.
- Hidden by default
- Never included in lists. Each reveal is a deliberate action that checks permissions.
- Logged
- Every view records who, when, and from which device.
- Limited for inspectors
- Available only on the day of a visit assigned to them.
- Never for homeowners
- Owners and family viewers can't see access codes in the portal.
- Kept out of messages
- Our rule is that access information never goes in emails, texts, logs or analytics.
- Cleared from the phone
- For offline visits it's held only for the active visit, and cleared on submit or after 12 hours.
14 Heron Way: access info
Who viewed this
- D. InspectorTue, Oct 28, 9:42 AMPhone
- R. ManagerMon, Oct 20, 3:15 PMDesktop
Each company's data is separate
The company is determined on the server from the signed-in session, not from anything the browser sends. Automated tests try to reach another company's data and must fail.
Homeowners see only their own homes
An owner sees a property only if they've been explicitly linked to it. Occupancy status and maps are for staff only.
Photos
Stored privately, reached only through short-lived links after a permission check. Location data is stripped from the photos homeowners see.
Signing in
Staff use a password, with optional passkeys and two-factor authentication. Homeowners use a single-use emailed link that expires after 15 minutes.
Records
Sensitive actions go to an append-only audit log, including access-info views, role changes and report publication.
Report a security concern
Email sales@ternhome.com.
What we don't have yet
- No SOC 2 report or independent security audit today. We'll say so here when that changes.
- Not open to new clients yet. If you have questions in the meantime, email us at sales@ternhome.com.
- No system is perfectly secure. We won't claim otherwise.
Have questions from your own clients or insurer?
Email us