Security
Owner financials stay owner financials.
Rent rolls, tenant names and operating statements are the most sensitive files a landlord shares. Here is how we protect them.
SOC 2 Type II
Independent annual audit of security, availability and confidentiality controls. Report available under NDA from the trust center.
Per-tenant isolation
Each customer workspace stores rent rolls, P&Ls and tenant names in a logically isolated data store with its own encryption keys.
Encryption
AES-256 at rest with keys in AWS KMS, rotated annually; TLS 1.3 in transit, with HSTS on every domain.
Zero model training
Customer property financials and valuation workbooks never train any AI model, ours or a vendor's. Document AI runs with training disabled by contract.
MFA and SSO
Multi-factor authentication for every user; SAML 2.0 SSO and SCIM provisioning with Okta and Microsoft Entra ID on Enterprise.
Role-based access
Restrict analysts by client, fund, region or asset. Clients get read-only portals limited to their own cases.
Audit trail
Every view, export, edit and filing action is logged with user, time and IP, and exportable to your SIEM.
US data residency
Customer data is hosted in AWS us-east-2 (Ohio) with us-west-2 (Oregon) failover. Engineers in Faridabad have no standing production data access.
One path for your data, logged end to end.
Files are encrypted the moment they arrive, processed inside your tenant boundary and never leave it except as the exports you choose.
Security questions
Do engineers in India see our rent rolls?
No standing access. Production data access requires a customer-approved support ticket, a time-boxed just-in-time grant, and is logged and reviewed. Most support is done from metadata alone.
Is evidence I upload shared with other customers?
Never. Comps and assessments from public rolls are shared reference data; your rent rolls, operating statements, verified comps and binders stay in your workspace.
Can we get the SOC 2 report and a completed questionnaire?
Yes. Request the SOC 2 Type II report, CAIQ and SIG Lite responses from the trust center or security@atalielectric.com under mutual NDA.
What happens to our data when we leave?
Export everything as PDF binders, XLSX workbooks and a JSON archive. Data is deleted from production within 30 days of termination and from backups within 90.
Stop overpaying commercial property tax on a flawed mass appraisal.
Upload an assessment notice. ATALI ELECTRIC returns a valuation audit and comp analysis in about two minutes.