How PuntaManaged protects your company's data

Tenant isolation

Every record belongs to one company, and the application scopes every query to your company. PostgreSQL row-level security enforces the same rule inside the database, so a mistake in one layer doesn't expose another company's data.

Role-based access

19 built-in roles, from administrator to cleaner, with assignment to specific properties. Every action is checked on the server, not just hidden in the interface.

Audit logs

Role changes, approvals, restricted document downloads, access-code reveals and support sessions are recorded.

Encryption

All traffic uses encrypted connections (HTTPS). Stored secrets and credentials, such as calendar links, access codes, Wi-Fi passwords and integration secrets, are encrypted. Passwords are stored only as one-way hashes.

Account protection

Passwords must be long and complex, repeated failed sign-ins lock the account for a period, and changing a password signs out every session.

Private files

Uploaded photos and documents are private by default and served only after an access check. Where the format allows, photos are re-encoded to remove embedded location data.

Backup and restore

Backup and restore are scripted for the database and uploaded files, and the written restore procedure includes checking tenant isolation before restored data is used.

Secure payment architecture

Card details are entered on the payment provider's hosted pages and are never stored by PuntaManaged. PuntaManaged never collects another company's guest payments.

Support access controls

Our staff cannot silently sign in as you. A support session needs a stated reason, is time-limited and audited, and shows a visible banner in your workspace. You can end any session, cap its access level, or turn support sessions off.

Data export and offboarding

Export your company's records at any time. Deleting a company is a reviewed process: after an approved offboarding, data is kept for a retention period (30 days) and then deleted.

Trust center

The trust center gathers this page, our legal documents and the system status page in one place.

What PuntaManaged handles

Hosting, tenant isolation, encryption of stored secrets, backups, application security and the controls described on this page.

What your company handles

Who you invite and which role and properties they get, removing access when someone leaves, keeping passwords private, and choosing your support-session settings.

Guest and owner information

You decide what personal information to collect, such as whether registration requires an ID document, and you set retention periods that fit the rules where you operate.

Phones and field teams

Report a lost phone so its access can be revoked. Data on a phone that stays offline can't be wiped remotely while it is offline.