Security

Private home information deserves careful handling.

HTOC is designed so access to a home is checked on the server, private documents are not served publicly, and consequential actions leave an audit trail.

Current controls

• Authenticated sessions for account access.
• Workspace-scoped authorisation for home records.
• Private object storage with authorised download routes.
• Application-generated IDs, forward-only database migrations and audit/outbox records for important changes.

What to report

If you believe you have found a security issue, do not include documents, passwords, session data or private home details in an ordinary support message. Use the security contact route in Help and provide only enough information for us to respond safely.

Limits

HTOC is a developing pilot product. Security controls and operational procedures will continue to evolve before broader availability.