Security

Tenant isolation

Every organisation's data is separated and protected by database row-level security, so users only ever see the projects and records they are explicitly authorised to access — including granular, per-role visibility for developers, consultants, builders, superintendents, lenders and investors.

Encryption

Data is encrypted in transit using TLS, and encrypted at rest by our infrastructure providers.

Infrastructure

The platform runs on established cloud providers (managed Postgres and application hosting) with managed patching, backups and network controls.

Access control

Access is authenticated and role-based. Administrative access is limited to authorised personnel on a need-to-know basis.

Responsible disclosure

If you believe you have found a security issue, please contact us at support@developmentportal.com.au so we can investigate promptly.