Security
OpControl is built for property operators who handle sensitive financial and resident data. We apply layered controls and continuous improvement.
Controls
- TLS in transit; encrypted storage for production databases and secrets.
- Role-based access inside workspaces; admin and operator separation.
- CSRF protection, rate limiting, and API authentication for application surfaces.
- Dependency and infrastructure monitoring with incident runbooks.
Customer responsibilities
Use strong passwords / SSO where available, limit admin seats, and keep tenant/owner records accurate. Export and delete data through supported product tools when leaving the platform.
Report an issue
Email security@opcontrol.app or hello@opcontrol.app with steps to reproduce. Please allow a reasonable time before public disclosure.