Security
Where your data lives and who can reach it
Agencies trust aaraazi with client identities, prices and payments. This page says plainly how that data is handled, including what we don't offer yet.
Last reviewed 30 Sep 2026.
Where data is stored
The aaraazi application runs on managed cloud infrastructure, with application servers in Singapore. The database is a managed Postgres service. Data is encrypted in transit with HTTPS and encrypted at rest by the database provider.
How agencies are kept apart
Every record belongs to one agency, and the application filters every query by the signed-in user's agency. One agency cannot see another agency's properties, clients, deals or payments.
Data on agents' phones
The solo agent app keeps a copy of the agent's own records on the phone so it can work offline, stored in the app's private storage. Protect phones with a PIN or fingerprint, and tell us if a phone is lost so we can sign it out.
Your control over your data
The agency owns its data. An account owner can ask for a full export at any time. When a subscription ends, data stays available for export for 30 days and is then deleted. Client records stay with the agency when an agent leaves.
What we don't offer yet
- aaraazi has no independent security certification (such as ISO 27001 or SOC 2) at present. We will list any audit or certification here when we have one.
- Ask us about backup and restore arrangements, sign-in options and access controls for your plan before you move sensitive records.
Service providers
The product uses these providers to run. Each processes data only to provide its service to us.
| Provider | Purpose |
|---|---|
| Vercel | Runs the aaraazi application (Singapore region) |
| Supabase | Hosts the managed Postgres database |
| Cloudinary | Stores and resizes property photos |
| Google Firebase | Sign-in with Google for solo agents, and push notifications |
| Sentry | Error reports from the mobile app |
| Safepay | Subscription payments |
Report a vulnerability
If you find a security problem in aaraazi or this website, email security@aaraazi.com with the steps to reproduce it. Please don't access other people's data or disrupt the service while testing, and give us reasonable time to fix the issue before disclosing it. We acknowledge reports within three working days. Our security.txt has the same details.