Version 1.0 (2026-09)
How Connect Direct Hub protects information, and what happens if a security compromise occurs. No system can be guaranteed to be free of risk; this describes the safeguards in place and our response process.
Accounts are protected by email and password authentication, and every request is checked against the account's role.
Database access rules restrict each record to the landlord, tenant, agency or administrator entitled to it, so users cannot read records belonging to another property or tenancy.
Documents, inspection photographs and maintenance photographs are stored in private, access-controlled storage. Uploads are limited to safe file types and sizes.
Administrative actions are written to an audit log. Payment card details are never stored by us; payments are handled by the payment provider.
Traffic between your device and the service is encrypted in transit.
Report anything suspicious to [ADMIN PLACEHOLDER — Information Officer email address] or through the Complaints form, marking it urgent. Please do not publish the detail before we have had a chance to respond.
We investigate and contain the incident, assess what information was affected and record the incident.
Where POPIA section 22 applies, we notify the Information Regulator and the affected data subjects as soon as reasonably possible after the compromise has been established, describing what happened, the likely consequences and the steps you can take to protect yourself.
We do not claim certification or guaranteed security, and no undertaking in this notice is a warranty against every possible attack.