Security-conscious architecture
Security built around tenant isolation and accountable access.
PropertyCMS protects the operation behind the public website with tenant-scoped data access, role-aware administration, stronger sign-in options, auditability, and fail-closed external boundaries.
- Tenant-scoped reads and writes
- Roles, MFA, passkeys, and device controls
- Audit and credential boundaries
01 / Isolation
Keep every portfolio inside its tenant boundary.
Public and admin workflows resolve a tenant from a verified host, then scope tenant-owned data reads and writes to that tenant. Unknown hosts fail closed rather than borrowing a default tenant.
- Verified host resolution
- Tenant-scoped queries and mutations
- Separate platform-owner controls
02 / Accountability
Give people the access their role requires.
Role and permission checks shape what staff can view, edit, publish, or administer. MFA, passkeys, recovery methods, and device revocation support stronger account protection.
- Role-based permissions
- MFA and passkey support
- Session, device, and recovery controls
03 / Operations
Keep optional providers from becoming a site dependency.
Credentials are handled as secrets, critical actions are auditable, and external calls use bounded failure behavior. Deployments use backups, atomic activation, health checks, and a known rollback path.
- Audit history for important actions
- Bounded provider and webhook behavior
- Backup and release-recovery controls
THE WORKFLOW
From decision to outcome
A practical sequence your team can review.
- 01
Identify
Resolve the host, tenant, user, and intended route.
- 02
Authorize
Apply tenant, role, permission, and CSRF boundaries.
- 03
Act
Validate untrusted input and keep external work bounded.
- 04
Record
Retain appropriate operational and audit evidence.
QUESTIONS
Scope and specifics
Decide with the boundaries in view.
Have a requirement not covered here? Ask the PropertyCMS team.
Is PropertyCMS certified for a specific compliance program?
This page does not claim a certification. Ask the team for current evidence relevant to your own review and requirements.
Can one tenant see another tenant’s records?
The application is designed around tenant-scoped access, and cross-tenant denial is a required test boundary for tenant-owned data.
Does PropertyCMS guarantee uninterrupted uptime?
No service can honestly guarantee perfect uptime. The operating goal is high availability through reversible releases, monitoring, backups, health checks, and safe recovery.
Launch access
Bring your security questions to the people building the platform.
Tell us about your portfolio. We will send relevant launch availability and plan information—not a daily drip campaign.