Security
Your rental data, protected and hosted in Switzerland.
What we actually do to protect the data on your properties, tenants and owners, with no promise we cannot prove.
Hosting
OVHcloud, Zurich (Switzerland)
- Switzerland offers a level of protection the CNDP recognises as adequate
- Processing in line with Moroccan law No. 09-08
- Your data is not sold to third parties
In place today
What protects your account today
Encryption in transit
Every connection to Aqarrati uses HTTPS, enforced with HSTS.
Hashed passwords
Hashed with Argon2, never stored in clear. Two-step verification with an authenticator app is available for landlord and agency-team accounts.
Roles and permissions
Each agency member has a role: admin, property manager or read-only. Tenants and owners only reach their own portal.
Activity log
The team's important actions are recorded, viewable and exportable by the agency, and kept for 12 months.
Sealed bank details
Owners' bank details (RIB) are encrypted in the database (AES-256-GCM). Only the last four digits stay readable.
Verifiable contracts
A signed contract carries a QR code leading to a public verification page showing the document's fingerprint.
Your rights over your data
Under law 09-08 you have the right of access, rectification, erasure, objection and portability. Write to [email protected]. You can also lodge a complaint with the CNDP.
What we do not claim
Aqarrati has not yet been through a certification audit (SOC 2, ISO 27001). We will say so here the day an independent audit has been carried out.
A security question, or a vulnerability to report?
Write to [email protected].