COMPANY / SECURITY
Security at ESTATEREAL.
A clear overview of our certification, platform access and how to contact us about security.
ISO/IEC 27001
Certified information security management
ESTATEREAL Limited is certified to ISO/IEC 27001.
ISO/IEC 27001 is the international standard for information security management systems. It provides a framework for managing information risks and continually improving security. Certification applies to the management system and the scope described in the certificate.
Hosted on Microsoft Azure
The ESTATEREAL OS application is hosted on Microsoft Azure, with Azure SQL supporting its database. Ask us about the hosting location and operational arrangements applicable to your service.
Access that follows responsibility
Accounts use role-based access for the people who manage and use the platform. Administrators, operational staff and tenants have different responsibilities and views. Use individual accounts and review team access when responsibilities change.
Protected web connections
Our websites and application use HTTPS connections. This protects information while it travels between a browser and the service. Keep browsers and devices up to date, and do not share account credentials.
Privacy and data handling
Our website Privacy Policy explains enquiries, newsletter data and optional tracking. Application data and customer processing arrangements should be reviewed as part of the service agreement, including the responsibilities of your organisation.
Information for your supplier review
If you are completing a supplier review, contact us for certification details and the applicable scope. We can also discuss authentication, data location, encryption, backup and restore arrangements, retention and incident handling for the service you are evaluating.
Discuss your security requirementsReport a security concern
If you notice a possible vulnerability, suspicious activity or another security concern, contact our team. Include the affected service, a brief description and steps that help us understand the issue.
Use the contact form to start the conversation. Do not include passwords, access tokens, payment details or tenant documents; ask us for an appropriate way to share sensitive evidence.