Security and privacy, building by building

How access works

• Residents are invited from the building’s own register; there is no public sign-up.
• First sign-in checks email and mobile number against the register, then a 6-digit code sent to that email.
• Optional Google Authenticator two-step sign-in for every user.
• Building management roles are separate from owners and tenants.

How data is separated

Each building has its own app instance and database. One building’s residents can’t see another building’s data.

Protection in place

• HTTPS with TLS 1.2 or 1.3 and HSTS on every page.
• Rate limiting on sign-in and sign-up, plus an invisible anti-bot check on self-registration (no puzzles for residents to solve).
• Nightly backups, kept for 14 days.
• Full change history of approvals and edits.

Privacy

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Read our privacy policy.

Questions people ask

Who can see residents’ personal details?

Building management. Other residents don’t see each other’s details, and owners see building issues with reporters’ names hidden.

Does Watchdog Strata support two-step sign-in?

Yes. Users can add Google Authenticator (or another TOTP app) for two-step sign-in, and first sign-in requires a code sent to the email on file.

How is each building’s data kept separate?

Each building runs in its own instance with its own database, encrypted in transit with TLS and backed up nightly. Contact us for full data-handling details.