Jagoras uses layered controls to protect real estate workspaces, customer records and integration activity.
Workspace isolation
Organisation-scoped records use row-level security and role-aware access. Owners, administrators, managers and agents receive different permissions.
Authentication
Authentication is provided through controlled server and browser clients. Email verification, recovery and invitations use privacy-safe responses and limited tokens.
Credentials
Service-role and provider credentials remain server-side. Integration credentials are protected at rest and are never placed in public browser variables.
Operational security
Rate limiting, input validation, webhook verification, idempotency and audit records reduce abuse and support investigation.
Data handling
Jagoras does not store raw card details. Public form recipients are fixed server-side, and user input cannot choose an internal recipient.
Reporting concerns
Report a suspected vulnerability to support@jagoras.com. Do not access data that does not belong to you.