Trust and security
PropSec sells readiness for audits, so it holds itself to the same standard: your data held in London under the EU adequacy decision, a named GDPR controller, and AI that cannot touch a record without a person signing it off.
Where your data lives
EU and EEA data held under the UK adequacy decision
Your records are stored and served in London: the database and the application servers both run there. Sign-in, email and AI processing use named providers outside the UK under approved safeguards. The UK holds an EU adequacy decision, so EU and EEA data sits here lawfully. Each property is separately country-aware, so it is judged against the obligations of the country it operates in.
Data processing agreements are available for every customer, and data subject requests are handled through one address, not a ticket queue. UK and EU GDPR both apply by design.
Automations are off by default and switched on per property. AI drafts and proposes; a person approves; the record keeps who approved it, when, and the model that produced the draft.
Audit packs export signed and sealed in one tap, share links freeze the record at a point in time, and your data is yours to take if you ever leave.
How the AI is governed
AI in PropSec explains, proposes and acts only inside the limits you set. The rules below are not settings you have to find; they are how the platform is built.
Provenance on the record
The named sub-processors behind the platform. We will tell you before we add one that handles your operational data.
Read the privacy policyQuestions buyers ask
Yes. Every certificate, check, ticket and sign-off lands on one immutable trail, and the evidence pack for an inspector exports in one tap. AI-drafted entries carry their provenance: which model drafted them, what it saw, and who approved the result.
Your records are stored in London, and the application runs there too. Sign-in, email and AI processing use named providers outside the UK under approved safeguards; they are listed below. The UK holds an EU adequacy decision, so data belonging to EU and EEA estates is lawfully held here. Separately, each property is country-aware: its compliance register carries the obligations of the country it operates in, whichever country that is.
It reads what you give it (certificates, photos, ticket history) and drafts entries, flags risks and proposes actions. It never writes the live record on its own: a person approves every change, and each AI output is logged with the model that produced it.
Yes. Audit packs export as signed, sealed documents covering the period an inspector asks for, and frozen share links give an auditor read-only access to a fixed point in time.
Pricing is custom to your estate: property count, modules and regions all move the number. Book a demo and you leave with a quote for your actual portfolio, not a tier that almost fits.
PropSec is regulation-aware across six countries today, including the UK, Ireland, the Netherlands, Germany and France, with the local frameworks for each. New regions are added with customers, not after them.
Something we have not answered? Write toinfo@propsec.co.uk orsend a message.
Bring your compliance lead. Twenty minutes on your estate, your regimes and your data.