Security and data protection

Housing records are personal data. These are the measures Dormix uses to protect them.

Organization isolation

Every request runs inside the user's own organization. One organization can never see another's data.

Each role can do only what it needs: for example, a technician sees only requests assigned to them.

Allocations, payments, status changes and other key actions are logged with who did them and when.

Passwords are stored encrypted, sign-in attempts are rate-limited, and resetting a password revokes old sessions.

The browser and app talk to the server over HTTPS only.

Image types are verified and shown only to users with permission.