Real Estate Management — Security, data storage and audit
Understand tokens, ownership, permissions, public routes, stored tables, file protections, activity and retention responsibilities.
Apply least privilege to Real Estate Management
Apply least privilege to Real Estate ManagementGrant only required view-own/view/create/edit/delete/approval/report/permission capabilities.Admin Area → Setup → Roles
Open guide →GuideProtect public application tokens
Protect public application tokensTreat invite URLs as bearer links and revoke unused invitations.Admin Area → Tenant Applications → Invitations
Open guide →GuideProtect agreement countersign tokens
Protect agreement countersign tokensSend countersign links only to the intended landlord/signatory.Onboarding workspace → Landlord Countersign
Open guide →GuideProtect renter identity and income evidence
Protect renter identity and income evidenceRestrict access and retention of uploaded identity/income files.Client Renter Profile and Admin review
Open guide →GuideProtect property-owner and tenant contact details
Protect property-owner and tenant contact detailsAvoid exposing private owner/tenant fields in public descriptions or files.Property/owner/client records
Open guide →GuideProtect supplier job evidence
Protect supplier job evidenceRestrict job photos, notes, invoices and payment details.Maintenance & Jobs / Supplier Portal
Open guide →GuideProtect broker portal accounts
Protect broker portal accountsUse active unique emails, strong passwords and appropriate broker/company links.Broker Portal and Admin Business Brokers
Open guide →GuideReview Real Estate stored tables
Review Real Estate stored tablesUnderstand that separate tables store properties, owners, client links, requests, onboarding, maintenance, suppliers, invoices, payouts and notifications.Database-backed module workspaces
Open guide →GuideReview core table extensions
Review core table extensionsKnow that roles, staff and items receive module columns.Admin Area → relevant role/staff/property forms
Open guide →GuideReview property activity and audit evidence
Review property activity and audit evidenceUse module/core activity, onboarding audit and workflow records.Admin Area → source record → Activity/Audit
Open guide →GuideReview tenant application audit evidence
Review tenant application audit evidenceUse invite/application/audit rows to trace submission and decision.Admin Area → Tenant Applications → open application
Open guide →GuideReview onboarding audit and workflow evidence
Review onboarding audit and workflow evidenceTrace steps, status transitions, messages, documents and signatures.Onboarding workspace → Audit/History
Open guide →GuideReview supplier and payout audit evidence
Review supplier and payout audit evidenceReconcile job status/photos/notes with invoice and payment values.Admin Area → Maintenance & Jobs / Supplier Invoices/Payouts
Open guide →GuideUnderstand file-storage responsibilities
Understand file-storage responsibilitiesUse supported upload/preview/delete actions and secure web-server permissions.Property, profile, onboarding, maintenance and supplier file areas
Open guide →GuideUnderstand application retention setting
Understand application retention settingReview the seeded 180-day application-retention value against policy/law.Admin Area → Tenant Application settings
Open guide →GuideUnderstand public application consent separation
Understand public application consent separationKeep processing/referencing/credit and marketing choices distinct.Public Tenant Application → Consents
Open guide →GuideUnderstand no generic Real Estate REST API
Understand no generic Real Estate REST APIDo not expect a documented external REST API from the supplied module.Technical reference → supplied controllers/routes
Open guide →GuideUnderstand no Real Estate webhook framework
Understand no Real Estate webhook frameworkDo not expect inbound/outbound webhook configuration from this module.Technical reference → hooks/controllers
Open guide →GuideUnderstand no registered Real Estate cron hook
Understand no registered Real Estate cron hookDo not expect module background scheduling from the supplied realestate.php registration.CRM Cron and technical reference
Open guide →GuideReview backup and checkpoint files as excluded artefacts
Review backup and checkpoint files as excluded artefactsDo not present .bak, .checkpoint, debug logs or error_log files as user features.Deployment package review
Open guide →GuideRun a Real Estate security review
Run a Real Estate security reviewTest role boundaries, portal ownership, tokens, files, email, PDF and financial links.Controlled test environment across all roles
Open guide →