How Strata Help Desk protects the data of Queensland strata communities — hosting, access control, and incident handling at a glance.
Strata Help Desk is hosted entirely within Australia. Committee, owner, and resident data does not leave Australian soil in the course of normal operation. Our infrastructure provider holds ISO/IEC 27001 and SOC 2 Type II certifications covering physical data centre security, network infrastructure, and platform operations.
Passwordless email-based two-factor login — no stored passwords to leak, phish, or reuse.
Distinct roles for managers, committee members, owners, tenants, and building staff enforce least-privilege access to every screen and record.
Every data query is scoped to its building — one strata community's records are never visible to another.
System actions are recorded to an audit trail, supporting after-the-fact review and committee accountability.
Data is encrypted in transit (TLS) and at rest on our managed database and file storage.
Login and API endpoints are rate-limited to slow automated abuse and credential-stuffing attempts.
Strata records are retained in line with the Queensland Body Corporate and Community Management Act's obligations. When an owner, tenant, or building offboards, personal data is de-identified while the underlying governance record (decisions, votes, financial history) is preserved for the required retention period.