Trust & Security
Security & data protection
Pastrata is a Canadian company building software for strata and condo communities. Here's how we protect the resident, financial, and governance data buildings trust us with.
How we protect your building's data
Encryption everywhere
Data is encrypted in transit (TLS) and at rest, using managed encryption for our database and file storage.
Building-level tenant isolation
Pastrata is multi-tenant by design. Every query is scoped to a building, so one building's residents, documents, and financials are never visible to another.
Role-based access control
Access is governed by capabilities tied to your role — owner, resident, council member, or property manager. You only see and can do what your role permits.
Passwordless authentication
Sign in with a magic link, Google or Apple OAuth, or a passkey (WebAuthn) — there is no password to phish, reuse, or leak.
Admin audit logging
Administrative actions taken on the platform are logged, giving building managers and Pastrata's own team an auditable trail.
Automated backups
Our production database is continuously backed up, so your community's records can be recovered quickly if something goes wrong.
Privacy & data handling
Canadian privacy law alignment
Pastrata is built in Canada, and our privacy practices are aligned with PIPEDA and British Columbia's Personal Information Protection Act (PIPA).
A small, vetted set of sub-processors
We rely on Amazon Web Services (hosting and infrastructure), Amazon SES (transactional email delivery), and Freshworks CRM (to manage inbound sales inquiries — never resident data).
Account deletion, on request
You can request deletion of your account and personal information at any time.
For the full detail on what we collect, how we use it, and your rights, read our Privacy Policy.
See it on your portfolio
A 30-minute walkthrough sized to your building count — and you leave with real portfolio pricing.