How Strata Help Desk protects the data of Queensland strata communities — hosting, access control, and incident handling at a glance.
Strata Help Desk is hosted entirely within Australia, on DigitalOcean's infrastructure. Committee, owner, and resident data does not leave Australian soil in the course of normal operation. Our underlying infrastructure provider, DigitalOcean, holds its own ISO/IEC 27001:2013 and SOC 2 Type II certifications covering physical data centre security, network infrastructure, and platform operations.
Passwordless email-based two-factor login — no stored passwords to leak, phish, or reuse.
Nine distinct roles (Admin, Manager, Owner, Tenant, Committee, and others) enforce least-privilege access to every screen and record.
Every data query is scoped to its building — one strata community's records are never visible to another.
System actions are recorded to an audit trail, supporting after-the-fact review and committee accountability.
Data is encrypted in transit (TLS) and at rest on our managed database and file storage.
Login and API endpoints are rate-limited to slow automated abuse and credential-stuffing attempts.
Strata records are retained in line with the Queensland Body Corporate and Community Management Act's obligations. When an owner, tenant, or building offboards, personal data is de-identified while the underlying governance record (decisions, votes, financial history) is preserved for the required retention period.
| Provider | Purpose | Location |
|---|---|---|
| DigitalOcean | Application hosting, managed database, file storage | Australia |
| Google (Gmail) | Transactional email delivery | Global (Google infrastructure) |
Information Security Policy, Access Control Policy, Incident Response Plan, and Data Retention Policy are available on request for procurement or due-diligence review.
📧 Request Security Documentation