Security

How Well Homes is built to protect the people and records it holds.

Keeping landlords apart

Each organisation's records are separated in the database, and checked again on the server for each request.

The record

Audit events cannot be changed or deleted in normal use. Each is sealed with a hash of itself and the event before it, so alteration shows up when the chain is checked. Statutory deadlines are worked out on the server and can only move earlier.

Access

Staff have named accounts with roles, and access stops when an account is deactivated. Contractors use private, time-limited links to the case they are working on. Staff change a case only through the server, which applies the rules and writes the audit trail.

Photos and files

Files are kept in private storage. Links to them expire. Location data is removed from tenants' photos as they upload, where the browser can read the photo.

Reporting a concern

If you think you have found a security problem, please tell us at hello@wellhomes.co.uk.