Skip to content
Stridman

Systems / Responsibility

Trust isdesigned in.

Security and data.

How this website handles what you send us, and how the systems we build for clients are protected. Plainly stated, and only what we can stand behind.

This website

Security at the point of contact.

  1. Encrypted connections

    Every page and form is served over HTTPS.

  2. Forms handled on the server

    Submissions are checked and saved by server code. Error messages never show internal details.

  3. Insert-only storage for checklist requests

    The website can add a checklist request to the database but cannot read, change or delete one. Removal works only with the private link in your email.

  4. Spam and abuse protection

    A hidden honeypot field and a limit on how often one connection can submit.

  5. No advertising trackers

    Page analytics are aggregated and cookie-free, and fonts are served from our own domain.

Client systems

The systems we build.

Four protections, layered. Encryption keys are held apart from the store, and an append-only audit trail records activity at every layer.

  • 01 / Transport

    Encrypted in transit and at rest

    Data is encrypted on the way to the system and where it is stored.

  • 02 / Identity

    Role-based permissions

    Each person sees and changes only what their role needs.

  • 03 / Record

    Append-only audit trail

    A record of who did what, and when, that cannot be quietly edited afterwards.

  • 04 / Keys

    Keys held separately

    Encryption keys are kept apart from the data they protect.

How a client system is protectedFour layers protect a client system: encrypted transport, identity, application permissions and an encrypted store. Encryption keys are held separately from the store, and an append-only audit trail records activity at every layer.Encrypted transportEvery connection uses TLSIdentityEach person signs in as themselvesApplication permissionsRoles decide who sees whatEncrypted storeData encrypted at restAppend-only audit trailWho did what, and when, at everylayer. Added to, never edited.Keys held separatelyApart from the data they protect

Hosting and processing

Where data is processed.

Location is part of the agreement, and this website is separate from the client systems we run.

Hosting region agreed per project

The PropertySouthAfrica CRM database is hosted in South Africa by Xneelo. For other clients, we can host in any country, including South Africa, or on-premise; the location is agreed per project.

This website

This website is separate from the client systems we run. It uses international providers for hosting, its enquiry database, email and bookings, so data sent through this site may be processed outside South Africa. Our privacy policy lists each one, what it handles and where, including the regions we are still confirming.

Responsibilities

Your role and ours under POPIA.

You are the responsible party for your clients' personal information. Stridman is your operator: we process it only on your instruction, for the purpose you engaged us for.

We describe our systems as POPIA-aligned. We do not hold, and do not claim, any POPIA certification, or any certification or compliance under other countries' laws.

Report a concern

Reporting a concern.

If you think you have found a security problem in this site or a system we run, email connect@stridman.com with the details. Please do not access or change data that is not yours while looking.

Email a security concern